- CISSP in 21 Days Second Edition
- CISSP in 21 Days Second Edition
- Credits
- About the Author
- About the Reviewer
- www.PacktPub.com
- Preface
- 1. Day 1 – Security and Risk Management - Security, Compliance, and Policies
- 2. Day 2 – Security and Risk Management - Risk Management, Business Continuity, and Security Education
- 3. Day 3 – Asset Security - Information and Asset Classification
- 4. Day 4 – Asset Security - Data Security Controls and Handling
- 5. Day 5 – Exam Cram and Practice Questions
- 6. Day 6 – Security Engineering - Security Design, Practices, Models, and Vulnerability Mitigation
- 7. Day 7 – Security Engineering - Cryptography
- 8. Day 8 – Communication and Network Security - Network Security
- An overview of communication and network security
- Network architecture, protocols, and technologies
- Open System Interconnect (OSI) model
- OSI layers and security
- Application layer protocols and security
- Presentation layer protocols and security
- Summary
- Sample questions
- 9. Day 9 – Communication and Network Security - Communication Security
- An overview of communication security
- Security in communication channels
- Attacks on communication networks
- Preventing or mitigating communication network attacks
- Summary
- Sample questions
- 10. Day 10 – Exam Cram and Practice Questions
- 11. Day 11 – Identity and Access Management - Identity Management
- 12. Day 12 – Identity and Access Management - Access Management, Provisioning, and Attacks
- 13. Day 13 – Security Assessment and Testing - Designing, Performing Security Assessment, and Tests
- An overview of security assessment and testing
- Security assessment and test strategies
- Security controls
- Summary
- Sample questions
- 14. Day 14 – Security Assessment and Testing - Controlling, Analyzing, Auditing, and Reporting
- 15. Day 15 – Exam Cram and Practice Questions
- 16. Day 16 – Security Operations - Foundational Concepts
- An overview of operations security
- The physical security design
- Physical and operations security controls
- Operations/facility security
- Protecting and securing equipment
- Computer investigations
- Summary
- Sample questions
- 17. Day 17 – Security Operations - Incident Management and Disaster Recovery
- 18. Day 18 – Software Development Security - Security in Software Development Life Cycle
- 19. Day 19 – Software Development Security - Assessing effectiveness of Software Security
- 20. Day 20 – Exam Cram and Practice Questions
- 21. Day 21 – Exam Cram and Mock Test
Communication channels facilitate the transmission of information across users or devices. The increasing adoption of mobile communication systems with smart technologies have blurred the isolation of communication and computing devices to Unified Information and Communication systems. This rapid progression and unification of communication and computing technologies have also opened multiple vectors for attacks, numerous threats, and vulnerabilities. Hence, it is essential for a security professional to understand and apply suitable security controls to address modern-day threats and vulnerabilities in communication technologies, such as voice, multimedia, remote access, data communications, mobile communications, and virtualized networks.
In Information and Communication Technology (ICT), which is a convergence of data communication and voice communication technologies, security requirements focus primarily on data integrity, service availability, and identity assurance. The traditional circuit-based telephony networks are being rapidly replaced with packet-switching-based data networks. Thus, end-to-end protection for devices, communication channels, and operator networks from unauthorized access and compromise from external networks become a priority requirement while designing and implementing communication networks.
The following are some of the common security requirements in ICT systems:
- Prevention of unauthorized access and modification of the data at devices, data in transmission, and the data being processed
- Service assurance such as availability of communication channels and devices, including the operator side equipment
- Assurance from theft or the leakage of service such as the diversion of data or calls and operator and business side revenue theft
-
No Comment