UOP-CMGT245 - IS Security Concepts

Assessing Risk and Monitoring Networks

• Threat Assessment
• Risk Assessment
• Developing Policies, Standards, and Guidelines
• Frameworks, Best Practices, and Configuration Guides
• Secure Network Architecture Concepts
• Secure Systems Design
• Designing with Security in Mind

Managing Identity and Access

• Using Tools to Assess Your Network
• Troubleshooting Common Security Issues
• Security Technologies
• Identity and Access Management Concepts
• Install and Configure Identity and Access Services
• File and Database Security

Securing Against Threats

• Wireless Vulnerabilities to Know
• Wireless Commonsense
• Wireless Attack Analogy
• Working with Cloud Computing
• Working with Virtualization
• Security and the Cloud
• Threat Actors and Attributes
• Use of Open Source Intelligence
• Types of Vulnerabilities
• Embedded Systems Security
• Application Vulnerabilities
• Secure Programming
• Other Application Security Issues
• Code Issues

Detecting Vulnerabilities and Cryptography Basics

• An Overview of Cryptography
• Modern Cryptography
• Using Cryptographic Systems
• Understanding Cryptography Standards and Protocols
• Public Key Infrastructure
• Using Public Key Infrastructure
• Authentication
• Threat and Attack Terminology
• Living in a World of Viruses
• Malware and Crypto-Malware
• Understanding Various Types of Application/Service Attacks
• Understanding Social Engineering
• Understanding Physical Security
• Various Control Types
• Data Security and Privacy Practices

Security Administration and Disaster Recovery

• Connection Types
• Mobile Devices
• Account Management Concepts
• Penetration Testing
• Issues Associated with Business Continuity

Appendix A: 3D Game Simulation

About