CISSP Study Guide

CISSP Study Guide serves as a review for those who want to take the Certified Information Systems Security Professional (CISSP) exam and obtain CISSP certification. The exam is designed to ensure that someone who is handling computer security in a company has a standardized body of knowledge.
The book is composed of 10 domains of the Common Body of Knowledge. In each section, it defines each domain. It also provides tips on how to prepare for the exam and take the exam. It also contains CISSP practice quizzes to test ones knowledge.
The first domain provides information about risk analysis and mitigation. It also discusses security governance. The second domain discusses different techniques for access control, which is the basis for all the security disciplines. The third domain explains the concepts behind cryptography, which is a secure way of communicating that is understood only by certain recipients. Domain 5 discusses security system design, which is fundamental for operating the system and software security components. Domain 6 is a critical domain in the Common Body of Knowledge, the Business Continuity Planning, and Disaster Recovery Planning. It is the final control against extreme events such as injury, loss of life, or failure of an organization. Domains 7, 8, and 9 discuss telecommunications and network security, application development security, and the operations domain, respectively. Domain 10 focuses on the major legal systems that provide a framework in determining the laws about information system.

• Clearly Stated Exam Objectives
• Unique Terms / Definitions
• Exam Warnings
• Helpful Notes
• Learning By Example
• Stepped Chapter Ending Questions
• Self Test Appendix
• Detailed Glossary

• Web Site (http://booksite.syngress.com/companion/conrad) Contains Two Practice Exams and Ten Podcasts-One for Each Domain

  Autorentext

  Eric Conrad (CISSP, GIAC GSE, GPEN, GCIH, GCIA, GCFA, GAWN, GSEC, Security+), is a SANS-certified instructor and President of Backshore Communications, which provides information warfare, penetration testing, incident handling, and intrusion detection consulting services. Eric started his professional career in 1991 as a UNIX systems administrator for a small oceanographic communications company. He gained information security experience in a variety of industries, including research, education, power, Internet, and healthcare, in positions ranging from systems programmer to security engineer to HIPAA security officer and ISSO. He has taught more than a thousand students in courses such as SANS Management 414: CISSP, Security 560: Network Penetration Testing and Ethical Hacking, Security 504: Hacker Techniques, and Exploits and Incident Handling. Eric graduated from the SANS Technology Institute with a Master of Science degree in Information Security Engineering.

  Inhalt

  Chapter 1: Introduction Chapter 2: Domain 1: Information Security Governance and Risk Management Chapter 3: Domain 2: Access Control Chapter 4: Domain 3: Cryptography Chapter 5: Domain 4: Physical (Environmental) Security Chapter 6: Domain 5: Security Architecture and Design Chapter 7: Domain 6: Business Continuity and Disaster Recovery Planning Chapter 8: Domain 7: Telecommunications and Network Security Chapter 9: Domain 8: Application Development Security Chapter 10: Domain 9: Operations Security Chapter 11: Domain 10: Legal, Regulations, Investigations, and Compliance Appendix: Self Test Glossary Index