1 – Security Fundamentals

• Information Security Controls & Cycle
• Fundamentals of Cryptography
• Fundamentals of Security Policy
• Methods of Authentication

2 – Identifying Security Threats and Vulnerabilities

• Malware
• Physical Vulnerabilities and Threats
• Social Engineering
• Software-Based Threats
• Network-Based Threats
• Physical Vulnerabilities and Threats
• Wireless Vulnerabilities and Threats

3 – Managing Data, Application, and Host Security

• Manage Data Security
• Manage Application Security
• Manage Device and Host Security
• Manage Mobile Security

4 – Implementing Network Security

• Configure Security Parameters on Network Devices and Technologies
• Network Design Components and Elements
• Secure Wireless Traffic
• Apply Principles of Secure Network Administration
• Implement Networking Services and Protocols

5 – Implementing Account Management, Access Control and Authentication

• Implement Account Management Security Controls
• Authentication Services and Access Control

6 – Managing Certificates

• Install a Certificate Authority (CA) Hierarchy
• Enrol Certificates
• Secure Network Traffic by Using Certificates
• Restore and Back Up Certificates and Private Keys
• Revoke and Renew Certificates
• Restore Certificates and Private Keys

7 – Implementing Compliance and Operational Security

• Physical Security
• Legal Compliance
• Security Training and Awareness
• Integrate Systems and Data with Third Parties

8 – Management of Risk

• Risk Analysis
• Implement Vulnerability Assessment Tools and Techniques
• Scan for Vulnerabilities
• Mitigation and Deterrent Techniques

9 – Managing and Troubleshooting Security Incidents

• Recover from a Security Incident
• Respond to Security Incidents

10 – Business Continuity and Disaster Recovery Planning

• Business Continuity
• Plan for Disaster Recovery
• Execute Disaster Recovery Plans and Procedures