Get Set CISSP

In this episode I talk about International Laws for Cyber Crime, Data Breaches, U.S. Data Privacy Laws, EU-GDPR, OECD Guidelines, Import & Export Controls, Transborder Data Flow and PCI-DSS.

In this episode I talk about Types of Laws, Regulations, Intellectual Property, Copyright, Patient, Trademark, Trade Secret.

In this episode I talk continue on Risk Management, Types of Risk Analysis, Types and Methodologies of Risk Assessments, Business Continuity Planning.

In this episode I talk about Personnel Security, Separation of Duties, Least Privilege, Need to Know, Vendor, Consultant and Contractor Controls, Security Governance, Risk Management.

In this episode I talk about the concept of Security Roles and Responsibilities, Control Frameworks, Due care & Due Diligence, Policies, Standards, Procedures, Guidelines & Baseline and Threat Modeling which are essentials from an exam and real life security practice perspective.

In this episode I talk about the concept of Business Case, Types of Project Plans, Organizational Process, Change Management and Data Classification which are essentials from an exam and real life security practice perspective.

In this episode I talk about the concept of IAAA which is Identification, Authentication, Authorization, Auditing also focusing on Accountability in a secure system since most secure systems rely on accountability and repudiation.

In this episode I talk about the concept of Balanced Security, Types of Controls in the form of a story to better understand solidify the understanding of controls and also some important relation between Threat, Vulnerability and Risk. I have returned after a long time. Please do support and comment. 

In this domain I will cover the topics of

• ISC2 Code of Ethics
• Organizational Code of Ethics
• CIA Triads and its subsets

This is just a short episode to start the CISSP journey. I hope you enjoy it.