CIS 502: Security Management

• Trusting Our Communications in a Converged World
• Internet Systems Concepts
• Two Protocol Stacks, One Internet
• Wireless Network Technologies
• IP Addresses, DHCP, and Subnets
• IPv4 vs. IPv6: Important Differences and Options
• CIANA Layer by Layer
• Securing Networks as Systems
• Summary
• Exam Essentials

15 LiveLab in this lesson — see the labs panel →

• Identity and Access: Two Sides of the Same CIANA+PS Coin
• Identity Management Concepts
• Access Control Concepts
• Network Access Control
• Implementing and Scaling IAM
• User and Entity Behavior Analytics (UEBA)
• Zero Trust Architectures
• Summary
• Exam Essentials

1 LiveLab in this lesson — see the labs panel →

• Cryptography: What and Why
• Building Blocks of Digital Cryptographic Systems
• Keys and Key Management
• Modern Cryptography: Beyond the “Secret Decoder Ring”
• “Why Isn't All of This Stuff Secret?”
• Cryptography and CIANA+PS
• Public Key Infrastructures
• Applying Cryptography to Meet Different Needs
• Managing Cryptographic Assets and Systems
• Measures of Merit for Cryptographic Solutions
• Attacks and Countermeasures
• PKI and Trust: A Recap
• On the Near Horizon
• Summary
• Exam Essentials

4 LiveLab in this lesson — see the labs panel →

• Infrastructure Security Is Baseline Management
• Securing the Physical Context
• Infrastructures 101 and Threat Modeling
• Endpoint Security
• Malware: Exploiting the Infrastructure's Vulnerabilities
• Privacy and Secure Browsing
• “The Sin of Aggregation”
• Updating the Threat Model
• Managing Your Systems' Security
• Summary
• Exam Essentials

1 LiveLab in this lesson — see the labs panel →

• It's a Data-Driven World…At the Endpoint
• Software as Appliances
• Applications Lifecycles and Security
• CIANA+PS and Applications Software Requirements
• Application Vulnerabilities
• “Shadow IT:” The Dilemma of the User as Builder
• Information Quality and Information Assurance
• Protecting Data in Motion, in Use, and at Rest
• Into the Clouds: Endpoint App and Data Security Considerations
• Legal and Regulatory Issues
• Countermeasures: Keeping Your Apps and Data Safe and Secure
• Summary
• Exam Essentials

• Defeating the Kill Chain One Skirmish at a Time
• Harsh Realities of Real Incidents
• Incident Response Framework
• Preparation
• Detection and Analysis
• Containment and Eradication
• Recovery: Getting Back to Business
• Post-Incident Activities
• Summary
• Exam Essentials

• What Is a Disaster?
• Surviving to Operate: Plan for It!
• Timelines for BC/DR Planning and Action
• Options for Recovery
• Cloud-Based “Do-Over” Buttons for Continuity, Security, and Resilience
• People Power for BC/DR
• Security Assessment: For BC/DR and Compliance
• Converged Communications: Keeping Them Secure During BC/DR Actions
• Summary
• Exam Essentials

• Operationalizing Security Across the Immediate and Longer Term
• Supply Chains, Security, and the SSCP
• Other Dangers on the Web and Net
• On Our Way to the Future
• Enduring Lessons
• Your Next Steps
• At the Close
• Exam Essentials