CYB/205 v3: Infrastructure Administration

• Information: The Lifeblood of Business
• Policy, Procedure, and Process: How Business Gets Business Done
• Who Runs the Business?
• The Common Needs for Privacy, Confidentiality, Integrity, and Availability
• Training and Educating Everybody
• SSCPs and Professional Ethics

1 LiveLab in this lesson — see the labs panel →

• It’s a Dangerous World
• The Four Faces of Risk
• Getting Integrated and Proactive with Information Defense
• Risk Management: Concepts and Frameworks
• Risk Assessment
• Four Choices for Limiting or Containing Damage
• From Tactical Planning to Information Security Operations
• Operationalizing Risk Mitigation: Step by Step
• The Ongoing Job of Keeping Your Baseline Secure
• Ongoing, Continuous Monitoring
• Reporting to and Engaging with Management

4 LiveLab in this lesson — see the labs panel →

• Trusting Our Communications in a Converged World
• Internet Systems Concepts
• Two Protocol Stacks, One Internet
• IP Addresses, DHCP, and Subnets
• IPv4 vs. IPv6: Key Differences and Options
• CIANA Layer by Layer
• Securing Networks as Systems
• Identity and Access: Two Sides of the Same CIANA Coin
• Identity Management Concepts
• Access Control Concepts
• Network Access Control
• Implementing and Scaling IAM
• Zero Trust Architectures
• Cryptography: What and Why
• Building Blocks of Digital Cryptographic Systems
• Keys and Key Management
• Modern Cryptography: Beyond the “Secret Decoder Ring”
• “Why Isn’t All of This Stuff Secret?”
• Cryptography and CIANA
• Public Key Infrastructures
• Other Protocols: Applying Cryptography to Meet Different Needs
• Measures of Merit for Cryptographic Solutions
• Attacks and Countermeasures
• On the Near Horizon
• Infrastructure Security Is Baseline Management
• Infrastructures 101 and Threat Modeling
• Malware: Exploiting the Infrastructure’s Vulnerabilities
• Privacy and Secure Browsing
• “The Sin of Aggregation”
• Updating the Threat Model
• Managing Your Systems’ Security
• It’s a Data-Driven World…At the Endpoint
• Software as Appliances
• Applications Lifecycles and Security
• CIANA and Applications Software Requirements
• Application Vulnerabilities
• “Shadow IT:” The Dilemma of the User as Builder
• Information Quality and Information Assurance
• Protecting Data in Motion, in Use, and at Rest
• Into the Clouds: Endpoint App and Data Security Considerations
• Legal and Regulatory Issues
• Countermeasures: Keeping Your Apps and Data Safe and Secure

15 LiveLab in this lesson — see the labs panel →

• Defeating the Kill Chain One Skirmish at a Time
• Incident Response Framework
• Preparation
• Detection and Analysis
• Containment and Eradication
• Recovery: Getting Back to Business
• Post-Incident Activities
• A Spectrum of Disruption
• Surviving to Operate: Plan for It!
• Cloud-Based “Do-Over” Buttons for Continuity, Security, and Resilience
• CIANA at Layer 8 and Above
• On Our Way to the Future
• CIA, CIANA, or CIANAPS?
• Enduring Lessons
• Your Next Steps
• At the Close

3 LiveLab in this lesson — see the labs panel →

• On-premises and Cloud Infrastructures
• Adoption of Cloud Infrastructure
• Security Considerations

1 LiveLab in this lesson — see the labs panel →