Chp 1

Let's lock this in! 🔒

CIA + extras

  • Confidentiality = secret, Integrity = unchanged, Availability = up and running

  • Integrity vs. non-repudiation: data wasn't changed vs. "you can't say it wasn't me"

Control categories: "MOTP" (My Office Tracks People)

  • Managerial = oversight (the bosses)

  • Operational = done by people

  • Technical = done by systems

  • Physical = hardware (locks, cameras, alarms)

Control types: think TIMELINE ⏱

  • Preventive = before (ACLs, anti-malware)

  • Detective = during (spots it happening)

  • Corrective = after (cleans up the damage)

  • Directive = rules/policy

  • Deterrent = scares people off

  • Compensating = backup plan when the main control fails

Threat agents: "NCH": Nation-state, Cybercriminals, Hacktivists

Roles

  • CSO = the security boss

  • ISSO = hands-on implementer of security policies

  • CIO = manages IT assets

  • CTO = new and emerging tech

Teams

  • DevOps = Dev + Ops → DevSecOps just slides Sec in the middle

  • SOC = the watch room; CSIRT/CIRT/CERT = incident response with IT, HR, legal, and marketing

Quiz time: a company can't afford a firewall, so it uses strict network segmentation instead. Which control type is that?

DevOps 🛠

• Dev = people who build software

• Ops = people who run it (servers, networks)

• DevOps = both teams working together instead of tossing code over a wall

Teams

• DevSecOps = same, but security is built in from the start, not bolted on at the end

•CIO = runs the company's IT stuff (computers, systems, procedures)

•CTO = hunts for new tech the company should use

•CSO = the top security boss, responsible for all security

•ISSO = the hands-on security person who actually sets up the security rules and controls