The only SSCP study guide officially approved by (ISC)2

The (ISC)2 Systems Security Certified Practitioner (SSCP) certification is a well-known vendor-neutral global IT security certification. The SSCP is designed to show that holders have the technical skills to implement, monitor, and administer IT infrastructure using information security policies and procedures.

This comprehensive Official Study Guide--the only study guide officially approved by (ISC)2--covers all objectives of the seven SSCP domains.

• Security Operations and Administration
• Access Controls
• Risk Identification, Monitoring, and Analysis
• Incident Response and Recovery
• Cryptography
• Network and Communications Security

• Systems and Application Security

  This updated Third Edition covers the SSCP exam objectives effective as of November 2021. Much of the new and more advanced knowledge expected of an SSCP is now covered in a new chapter "Cross-Domain Challenges." If you're an information security professional or student of cybersecurity looking to tackle one or more of the seven domains of the SSCP, this guide gets you prepared to pass the exam and enter the information security workforce with confidence.

  Autorentext

  ABOUT THE AUTHOR

  Michael S. Wills, SSCP, CISSP, CAMS, is Assistant Professor of Applied Information Technologies in the College of Business at the Embry-Riddle Aeronautical University's Worldwide Campus. He has many years of experience designing, building, and operating cutting-edge secure systems, and wrote (ISC)2s official training courses for both the SSCP and CISSP. He is also the creator of ERAU's Master of Science in Information Security and Assurance degree program.

  Klappentext

  Your complete guide to preparing for the SSCP exam

  The Third Edition of the (ISC)2 SSCP Systems Security Certified Practitioner Official Study Guide is your one-stop resource for complete coverage of the challenging SSCP exam. This self-paced Sybex Study Guide covers 100% of the SSCP domain competencies and offers the knowledge you'll need to help organizations protect their data throughout their systems from today's complex cyber attacks. New and expanded coverage for 2021 and beyond includes IoT, SCADA, and ICS security issues, Zero Trust, Access Controls, and App and Data security. It prepares students and professionals for the SSCP exam with assessment tests that validate exam readiness, objective maps, real-world scenarios, practical exercises, and challenging chapter review questions. You'll also get cross-device access to the online Sybex learning environment. After the exam, the book serves as a great on-the-job reference.

  Coverage of 100% of all exam objectives in this Study Guide means you'll be ready for:

• Security Operations and Administration
• Access Controls
• Risk Identification, Monitoring, and Analysis
• Incident Response and Recovery
• Cryptography
• Network and Communications Security

• Systems and Application Security
  Interactive learning environment

  Take your exam prep to the next level with Sybex's superior interactive online study tools. To access our learning environment, simply visit www.wiley.com/go/sybextestprep, register your book to receive your unique PIN, and instantly gain one year of FREE access after activation to:

• Interactive test bank with 2 practice exams to help you identify areas where further review is needed. Get more than 90% of the answers correct, and you're ready to take the certification exam.
• More than 120 electronic flashcards to reinforce learning and last-minute prep before the exam.

• Comprehensive glossary in PDF format gives you instant access to the key terms so you are fully prepared.
  ABOUT THE SSCP CERTIFICATION PROGRAM

  Successful completion of the Systems Security Certified Practitioner certification program demonstrates your competency in the implementation, monitoring, and administration of IT infrastructure using information security best practices, policies, and procedures. It proves you know how to ensure the confidentiality, integrity, and availability of data.

  Visit www.isc2.org/sscp for more information

  Zusammenfassung
  The only SSCP study guide officially approved by (ISC)2 The (ISC)2 Systems Security Certified Practitioner (SSCP) certification is a well-known vendor-neutral global IT security certification. The SSCP is designed to show that holders have the technical skills to implement, monitor, and administer IT infrastructure using information security policies and procedures. This comprehensive Official Study Guide--the only study guide officially approved by (ISC)2--covers all objectives of the seven SSCP domains. Security Operations and Administration Access Controls Risk Identification, Monitoring, and Analysis Incident Response and Recovery Cryptography Network and Communications Security * Systems and Application Security This updated Third Edition covers the SSCP exam objectives effective as of November 2021. Much of the new and more advanced knowledge expected of an SSCP is now covered in a new chapter "Cross-Domain Challenges." If you're an information security professional or student of cybersecurity looking to tackle one or more of the seven domains of the SSCP, this guide gets you prepared to pass the exam and enter the information security workforce with confidence.

  Inhalt

  Introduction xxv

  Assessment Test xlviii

  Part I Getting Started as an SSCP 1

  Chapter 1 The Business Case for Decision Assurance and Information Security 3

  Information: The Lifeblood of Business 4

  Policy, Procedure, and Process: How Business Gets Business Done 10

  Who Runs the Business? 20

  Summary 24

  Exam Essentials 24

  Review Questions 26

  Chapter 2 Information Security Fundamentals 33

  The Common Needs for Privacy, Confidentiality, Integrity, and Availability 34

  Training and Educating Everybody 47

  SSCPs and Professional Ethics 47

  Summary 49

  Exam Essentials 50

  Review Questions 54

  Part II Integrated Risk Management and Mitigation 61

  Chapter 3 Integrated Information Risk Management 63

  It's a Dangerous World 64

  The Four Faces of Risk 75

  Getting Integrated and Proactive with Information Defense 83

  Risk Management: Concepts and Frameworks 89

  Risk Assessment 95

  Four Choices for Limiting or Containing Damage 107

  Summary 114

  Exam Essentials 114

  Review Questions 120

  Chapter 4 Operationalizing Risk Mitigation 127

  From Tactical Planning to Information Security Operations 128

  Operationalizing Risk Mitigation: Step by Step 134

  The Ongoing Job of Keeping Your Baseline Secure 164

  Ongoing, Continuous Monitoring 174

  Reporting to and Engaging with Management 182

  Summary 183

  Exam Essentials 183

  Review Questions 189

  Part III The Technologies of Information Security 197

  Chapter 5 Communications and Network Security 199

  Trusting Our Communications in a Converged World 200

  Internet Systems Concepts 206

  Two Protocol Stacks, One Internet 218

  Wireless Network Technologies 240

  IP Addresses, DHCP, and Subnets 243

  IPv4 vs. IPv6: Important Differences and Options 248

  CIANA Layer by Layer 251

  Securing Networks as Systems 262

  Summary 273

  Exam Essentials 273

  Review Questions 280

  Chapter 6 Identity and Access Control 285

  Identity and Access: Two Sides of the Same CIANA+PS Coin 286

  Identity Management Concepts 288

  Access Control Concepts 295

  Network Access Control 305

  Implementing and Scaling IAM 310

  User and Entity Behavior Analytics (UEBA) 329

  Zero Trust Architectures 332

  Summary 333

  Exam Essentials 334

  Review Questions 343

  Chapter 7 Cryptography 349

  Cryptography: What and Why 350

  Building Blocks of Digital Cryptographic Systems 358

  Keys and Key Management 367

  "Why Isn't All of This Stuff Secret?" 373

  C…