Управление доступом к удостоверениям & Оценка и тестирование безопасности

купить сейчас

Цена: $109.99

Добро пожаловать на этот курс: CISSP Certification Domain 5 & 6: Управление идентификацией и доступом & Оценка и тестирование безопасности. Access is one of the most exploited aspects of security because it is the gateway that leads to critical assets. This course covers provisioning and managing identities, and the access used in the interaction between humans and information systems. Access controls need to be applied in a layered defense-indepth method, and an understanding of how these controls are exploited is extremely important. The core concepts of identification, аутентификация, authorization and accountability are covered in detail here. В этом курсе, we will explore access control conceptually and then dig into the technologies the industry puts in place to enforce these concepts. We will also look at the common methods the bad guys use to attack these technologies. This course also covers some of the most important elements of security assessments and testing. It is divided into five sections. We start by discussing audit strategies, particularly the pros and cons of using our own internal auditors or bringing in external contractors. We then move on to approaches to testing our technical security controls. The third major section deals with testing our administrative controls, which are mostly implemented through polices. в заключение, after we have enough empirical data to assess our posture, we discuss how to report our findings and how those findings play into the executive decision making within the organization.

В этом курсе, Этот экзамен предназначен для специалистов по базам данных, которые создают и внедряют базы данных в организациях и обеспечивают высокий уровень доступности данных.:

• Control physical and logical access to assets

• Manage identification and authentication of people, устройства, и услуги

• Integrate identity as a third-party service

• Implement and manage authorization mechanisms

• Manage the identity and access provisioning lifecycle

• Design and validate assessment, тестовое задание, and audit strategies

• Conduct security control testing

• Collect security process data (например, technical and administrative)

• Analyze test output and generate report

• Conduct or facilitate security audits