Official (ISC)2 Guide to the SSCP CBK ( http://www.fishpond.co.nz/Books/Official-ISC2-Guide-to-SSCP-CBK-Douglas-Andre-Eric-Waxvik/9780849327742

ISC)2 Press

By Douglas Andre, Eric Waxvik, Diana-Lynn Contesti, Paul A. Henry

Table of Contents

ACCESS CONTROLS Access Controls in Terms of Subjects Access Controls in Terms of Objects Authentication Implementation Access Control Concepts SECURITY OPERATIONS AND ADMINISTRATION Security Administration Change Management Concepts Systems Development Life Cycle (SDLC) Organization Security Evaluation and Assistance User Security Awareness and Education Code of Ethics Security Infrastructure Evaluation Tools Security Policy Administration Certification and Accreditation Process Concepts Security Best Practices Implementation ANALYSIS AND MONITORING Principles, Practices and Mechanisms Audits Monitoring Systems Analysis of Exploits RISK, RESPONSE, AND RECOVERY Risk Management Process Security Assessments Incident Handling Analysis The Business Continuity Plan (BCP) The Disaster Recovery Plan (DRP) CRYPTOGRAPHY Business and Security Requirements for Cryptography Principles of Certificates and Key Management Secure Protocols NETWORKS AND TELECOMMUNICATIONS Business and Security Requirements Remote Access Architecture Firelwalls Networks Wireless MALICIOUS CODE Viruses, Worms and Trojan Horses, Virus Activity Trap Doors and Back Doors Virus Hoaxes and Myths Characteristics of Malicious Code Appropriate Security Measures

About the Author

Hamilton, Ontario, Canada CitiFinancial, Oak Hill, Virginia, USA