• Confidentiality, integrity and availability
• Security governance principles
• Legal and regulatory Issues
• Business continuity requirements
• Policies, standards, procedures, and guidelines
• Risk management concepts
• Threat modeling
• Types of Intellectual Property (IP) Law
• Introduction to Risk Analysis
• Importance of Business Continuity Planning

Aligning security and risk to organizational objectives

• Evaluate and apply security governance principles
• Implement policies, standards and procedures
• Applying compliance

Applying risk management concepts

• Assessing threats and vulnerabilities
• Performing risk analysis and control
• Defining qualitative and quantitative analysis

Preserving the business

• Adhering to Business Continuity Management Code of Practice and Specifications
• Performing a business impact analysis

Asset Security

• Data classification
• Data Quality Assurance and Quality Control
• Limitation on collection of sensitive data
• Media Resource Protection
• Data Remanence
• Equipment Lifecycle
• Standards Selection Critical Security Control

Examining security models and frameworks

• The Information Security Triad and multi-level models
• Investigating industry standards: ISO 27001/27002
• Evaluating security model fundamental concepts

Exploring system and component security concepts

• Certification and accreditation criteria and models
• Reviewing mobile system/cloud/IoT vulnerabilities

Protecting information by applying cryptography

• Detailing symmetric and asymmetric encryption systems
• Ensuring message integrity through hashing
• Uncovering threats to cryptographic systems

Security Engineering

• Secure design principles
• Controls and countermeasures
• Virtualization
• Trusted platform module
• Mainframes and Other Thin Client Systems
• Database security
• Cloud Computing
• Multilevel Security Models
• Information Technology Security Evaluation Criteria
• The Internet of Things
•  DES Operation Modes Electronic Code Book
• Cryptography Methods Transposition Ciphe

• Network architecture
• OSI model
• TCP/IP
• Mutilayer protocols
• Storage protocols
• Voiceover IP
• Software-defined networks
• Content distribution networks
• Remote meeting technology
• Telecommuting
• Remote access and VPN
• Host-to-Host Layer and Application Layer
• Types of IP Addressing
• Flavors of LAN transmission methods
• IEEE Wireless Standards and Spread-Spectrum Technologies

• Physical and logical access
• Multi-factor authentication
• SSO Technologies
• Accountability
• Types of Biometrics
• Session management
• Credential management
• Third-party identity services
• Types of Access Control Administration
• Unauthorized Disclosure of Information
• Identification Authentication and Authorization

Security Assessment

• Assessment and test strategies
• Security control testing
• Security testing strategies
• Risk Evaluation and Control
• Internal and third-party audits 
• Reasons to Use Synthetic Transactions
• Code Review and Testing
• Common Software Vulnerabilities
• Leveraging the role of testing and auditing to analyze the effectiveness of security controls
• Differentiating detection and protection systems

Security Operations

• Investigations
• Operational, criminal, civil, and regulatory investigations
• Operating and Maintaining Preventive Measures
• Logging and Monitoring Activities
• Provisioning
• Threats to Operations
• Security Measurements, Metrics, and Reporting
• Incident management
• Forensic Investigation Guidelines
• Honeypots and honeynets
• Vulnerability management
• Change management processes
• Recovery strategies
• Disaster recovery processes
• Cloud and Virtual Storage Security Issues