Informações sobre o curso: Security operations and administration is the task of identifying an organization's information assets and the documentation needed for policy implementation, standards, procedures, and guidelines to ensure confidentiality, integrity, and availability. You will understand the process necessary for working with management and information owners, custodians, and users so that proper data classifications are defined. This will ensure the proper handling of all hard copy and electronic information. The Security operations and Administration course addresses basic security concepts and the application of those concepts in the day to day operation and administration of enterprise computer systems and the information that they host.Ethical considerations in general, and the (ISC)2 Code of Ethics in particular, provide the backdrop for any discussion of information security and SSCP candidates will be tested on both. Information security professionals often find themselves in positions of trust and must be beyond reproach in every way.Several core principles of information security stand above all others and this domain covers these principles in some depth. It can be said that the CIA triad of confidentiality, integrity and availability forms the basis for almost everything that we do in information security and the SSCP candidate must not only fully understand these principles but be able to apply them in all situations. additional security concepts covered in this domain include privacy, least privilege, non-repudiation and the separation of duties. Course Objectives 1. Define Code of Ethics 2. Describe the security concepts 3. Document and operate security controls 4. Describe the asset management process 5. Implement compliance controls 6. Assess compliance controls 7. Describe the change management process 8. Contribute to the security awareness training program 9. Contribute to physical security operations
Desenvolvido por: (ISC) ²
Ministrado por: (ISC)² Education & Training
Education & Training
| Informações básicas | |
| Nível | Beginner |
| Idioma | English |
| Como ser aprovado | Seja aprovado em todas as tarefas para concluir o curso. |
Visualizar
Programa
SEMANA 1
Understand and Comply with Code of Ethics and Security Concepts
Module Topics: (ISC)2 Code of Ethics, Organizational Code of Ethics, There are usually three types of controls, managerial (sometimes called administrative), Technical (sometimes called logical), and physical (sometimes called operational), Deterrent, Preventative, Detective, and Corrective Controls. Understand and Comply with Code of Ethics: In (ISC)2 Code of Ethics, you will learn about Code of Ethics, and Code of Ethics Canons. In Organizational Code of Ethics, you will learn about how a code of ethics applies to security practitioners, and applying ethical principles. Understand Security Concepts: In Confidentiality, you will learn about consequences of a breach, and ensuring confidentiality. In integrity, you will learn about consequences of integrity failure, availability, and consequences of availability failures. You will also Non-Repudiation. In Privacy, you will understand core guidelines. In least privilege, you will learn about least privilege and cots Applications. You will understand the concept of separation of duties and defense in depth, examples approaches, and additional controls. In Risk based Controls, you will learn about risk assessment data. Security concepts also covers accountability and authorization.
10 vídeos, 10 leituras
- 讨论提示: Discussion: The Meaning of Information Security
- Vídeo: Security Operations and Administration Course Introduction
- 阅读: Understand and Comply with Code of Ethics
- Vídeo: Security Concepts: Confidentiality
- 阅读: Security Concepts: Confidentiality
- Vídeo: Security Concepts: Ensuring Confidentiality
- 阅读: Security Concepts: Ensuring Confidentiality
- Vídeo: Security Concepts: Consequences of Integrity Failures
- 阅读: Security Concepts: Consequences of Integrity Failures
- Vídeo: Security Concepts: Core Guidelines
- 阅读: Security Concepts: Core Guidelines
- Vídeo: Security Concepts: Least Privilege
- 阅读: Security Concepts: Least Privilege
- Vídeo: Security Concepts: Additional Controls
- 阅读: Security Concepts: Additional Controls
- Vídeo: Security Concepts: Risk Assessment Data
- 阅读: Security Concepts: Risk Assessment Data
- Vídeo: Security Controls: Deterrent, Preventive, Detective, and Corrective Controls
- 阅读: Security Controls: Deterrent, Preventive, Detective, and Corrective Controls
- Vídeo: Security Controls: Timeline of a Security Incident
- 阅读: Security Controls: Timeline of a Security Incident
Nota atribuída: Quiz 1
SEMANA 2
Participate in Asset Management
Module Topics: Life Cycle, Hardware/Software, and Data. In life Cycle, you will learn about the waterfall model, it's benefits and drawbacks, requirements gathering and analysis, requirements definition, system design, implementation, integration, testing, deployment of system, maintenance, additional application development methods, system vulnerabilities, secure development, and acquisition practices, OWASP top ten, guidelines for developers, IT asset management (ITAM), device management, continuous diagnostics and mitigation (CDM), hardware, hardware asset management desired state, hardware asset management data, the SSCP's challenge, impact and results. In Data, you will learn about secure information storage, considerations, encryption vulnerabilities, database encryption, data scrubbing, data deduplication, managing encryption keys, consideration, Information Rights Management (IRM), secure output, data retention and disposal, shredders, security levels, destruction of magnetic media, erasure or reformatting, data wiping, degaussing, and disclosure controls: data leakage prevention.
14 vídeos, 14 leituras
- Vídeo: Asset Management: Life Cycle
- 阅读: Asset Management: Life Cycle
- Vídeo: Asset Management: The Waterfall Model
- 阅读: Asset Management: The Waterfall Model
- Vídeo: Asset Management: Benefits and Drawbacks
- 阅读: Asset Management: Benefits and Drawbacks
- Vídeo: Asset Management: Deployment of System
- 阅读: Asset Management: Deployment of System
- Vídeo: Asset Management: OWASP Top Ten
- 阅读: Asset Management: OWASP Top Ten
- Vídeo: Asset Management: Guidelines for Developers
- 阅读: Asset Management: Guidelines for Developers
- Vídeo: Asset Management: IT Asset Management (ITAM)
- 阅读: Asset Management: IT Asset Management (ITAM)
- Vídeo: Asset Management: Impact and Result
- 阅读: Asset Management: Impact and Result
- Vídeo: Asset Management: Encryption Vulnerabilities
- 阅读: Asset Management: Encryption Vulnerabilities
- Vídeo: Asset Management: Data Scrubbing
- 阅读: Asset Management: Data Scrubbing
- Vídeo: Asset Management: Considerations
- 阅读: Asset Management: Considerations
- Vídeo: Asset Management: Secure Output
- 阅读: Asset Management: Secure Output
- Vídeo: Asset Management: Destruction of Magnetic Media
- 阅读: Asset Management: Destruction of Magnetic Media
- Vídeo: Asset Management: Disclosure Controls
- 阅读: Asset Management: Disclosure Controls
Nota atribuída: Quiz 2
SEMANA 3
Implement and Assess Compliance with Controls & Participate in Change Management Duties
Module Topics: Technical Controls, Operational Controls, Managerial Controls, Security Policies, Standards, Guidelines, and Procedures, Implementation and Configuration Management Plan, security Impact Assessment, System Architecture/Interoperability of Systems, Testing Patches, Fixes, and Updates. In technical Controls, you will learn about identification and authentication, logical access controls, public access controls, audit trails. In Operational Controls, you will learn about operational security measures, operational solutions, managerial Controls. In Security Policies, Standards, Guidelines, and Procedures, you will learn about subject-specific security policies, typical policy elements, policy life cycle, components of a security policy, standard guidelines, and procedures.
Participate in Change Management Duties: In Implementation and Configuration Management Plan, you will learn about release management, release manager, release management policy, release management process, code signing, release management tools, systems assurance and controls validation, configuration management (CM), CM process, CM system goals, operational aspects of CM, hardware inventory, software inventory, configuration lists, configuration management for opening systems, identification, automated configuration management tools, control, accounting, and auditing. You will also understand the concepts of Security Impact Assessment and System Architecture/Interoperability of Systems. In Testing, Patches, Fixes, and Updates, you will learn about patch management, patch management process.
9 vídeos, 9 leituras
- Vídeo: Compliance with Controls: Technical Controls
- 阅读: Compliance with Controls: Technical Controls
- Vídeo: Compliance with Controls: Managerial Controls
- 阅读: Compliance with Controls: Managerial Controls
- Vídeo: Compliance with Controls: Policy Life Cycle
- 阅读: Compliance with Controls: Policy Life Cycle
- 讨论提示: Discussion: Characteristics of Policies
- 讨论提示: Discussion: Examples of Controls
- Vídeo: Change Management Duties: Implementation and Configuration Management Plan
- 阅读: Change Management Duties: Implementation and Configuration Management Plan
- Vídeo: Change Management Duties: Systems Assurance and Controls Validation
- 阅读: Change Management Duties: Systems Assurance and Controls
- Vídeo: Change Management Duties: CM Process
- 阅读: Change Management Duties: CM Process
- Vídeo: Change Management Duties: Configuration Management for Operating Systems
- 阅读: Change Management Duties: Configuration Management for Operating Systems
- Vídeo: Change Management Duties: Control
- 阅读: Change Management Duties: Control
- Vídeo: Change Management Duties: Testing Patches, Fixes, and Updates
- 阅读: Change Management Duties: Testing Patches, Fixes, and Updates
Nota atribuída: Week 3 Quiz
SEMANA 4
Participate in Physical Security Operations & Security Awareness Training
Module Topics: Security Awareness Training, Physical Security, Building Security, keys, Locks, and safes, communications and Server Rooms, Restricted and Work Area Security, Utilities and HVAC Considerations, Fire Prevention, Detection, and Suppression. Participate in Physical Security Operations: In Physical Security, you will learn about interior access control elements, and escort and visitor control. In building security, you will learn about doors, perimeter doors, door locks, mantraps, and turnstiles. In Keys, Locks, and Safe, you will learn about types of locks, hi-tech keys, safes, vaults, containers, key control, medeco guide for developing and managing key control. In communications and Server Rooms, you will learn about securing the area, protection from lightning, server rooms, and rack security. In Restricted and Work Area Security, you will learn about restricted work areas, data center security, and the "two- person rule". In Utilities and HVAC Considerations, you will learn about utilities and power uninterruptible power supply, generator, HVAC, air contamination, guidelines, and water issues. In Fire Prevention, Detection, and Suppression, you will learn about fire detection, fire suppression, sprinkler systems, and gas suppression systems.
11 vídeos, 11 leituras
- Vídeo: Physical Security Operations: Physical Security
- 阅读: Physical Security Operations: Physical Security
- Vídeo: Physical Security Operations: Doors
- 阅读: Physical Security Operations: Doors
- Vídeo: Physical Security Operations: Door Locks
- 阅读: Physical Security Operations: Door Locks
- Vídeo: Physical Security Operations: Turnstiles
- 阅读: Physical Security Operations: Turnstiles
- Vídeo: Physical Security Operations: Securing the Area
- 阅读: Physical Security Operations: Securing the Area
- Vídeo: Physical Security Operations: Rack Security
- 阅读: Physical Security Operations: Rack Security
- Vídeo: Physical Security Operations: HVAC
- 阅读: Physical Security Operations: HVAC
- Vídeo: Security Operations: Sprinkler Systems
- 阅读: Security Operations: Sprinkler Systems
- Vídeo: Security Operations: Gas Suppression Systems
- 阅读: Security Operations: Gas Suppression Systems
- Vídeo: Security Awareness Training: Critical Success Factors
- 阅读: Security Awareness Training: Critical Success Factors
- Vídeo: Security Awareness Training: Training
- 阅读: Security Awareness Training: Training
Nota atribuída: Week 4 Quiz
SEMANA 5
Case Study
Nota atribuída: Security Operations and Administration Case Study
SEMANA 6
Exam
1 leitura
- 阅读: SSCP Exam Information
Nota atribuída: End of the Course Assessment
Perguntas frequentes
Como funciona
课程作业
每门课程都像是一本互动的教科书，具有预先录制的视频、测验和项目。
来自同学的帮助
与其他成千上万的学生相联系，对想法进行辩论，讨论课程材料，并寻求帮助来掌握概念。
证书
获得正式认证的作业，并与朋友、同事和雇主分享您的成功。
Desenvolvedores
(ISC) ²
(ISC)² is an international nonprofit membership association focused on inspiring a safe and secure cyber world. Best known for the acclaimed Certified Information Systems Security Professional (CISSP®) certification, (ISC)2 offers a portfolio of credentials that are part of a holistic, programmatic approach to security. www.isc2.org
Custo
| Comprar curso | |
|---|---|
| Acesso aos materiais do curso | Disponível |
| Acesso a materiais valendo nota | Disponível |
| Receba uma nota final | Disponível |
| Obtenha um Certificado de Curso compartilhável | Disponível |
Classificações e avaliações
O Coursera proporciona acesso universal à melhor educação do mundo fazendo parcerias com as melhores universidades e organizações para oferecer cursos on-line.
© 2018 Coursera Inc. Todos os direitos reservados.
