Certified in Cybersecurity Comprehensive Study Notes

Certified in Cybersecurity Study Guide - Comprehensive Notes

Introduction

  • Overview:

    • This guide is based on the Certified in Cybersecurity (CC) exam.

    • Aimed at providing comprehensive learning resources for aspiring cybersecurity professionals.

  • Author: Mike Chapple, CISSP, CCSP

  • Features:

    • Interactive online learning environment.

    • Includes a complete practice exam and electronic flashcards.

    • Searchable glossary of key terms.

About the Certification

  • Offered by ISC2, a global nonprofit organization focused on cybersecurity credentialing.

  • Key Features:

    • Focuses on foundational security principles.

    • Covers five main domains: Security Principles, Business Continuity, Access Controls, Network Security, and Security Operations.

Domain 1: Security Principles

Objectives:

  1. CIA Triad: Confidentiality, Integrity, Availability.

  2. Non-repudiation

  3. Risk Management

  4. Security Controls

  5. Ethics

  6. Security Governance Processes

Chapter 1: CIA Triad

  • Confidentiality:

    • Ensures information is accessible only to those authorized.

    • Tools: policies, encryption, access controls.

  • Integrity:

    • Protects against unauthorized data alteration.

    • Tools: hashing, error detection mechanisms.

  • Availability:

    • Ensures authorized users have access to information and resources when needed.

    • Tools: redundancy, failover systems.

  • Non-repudiation:

    • Prevents users from denying actions; uses digital signatures and audit trails.

  • Risks to CIA:

    • Confidentiality Threats: snooping, dumpster diving, social engineering.

    • Integrity Threats: unauthorized data modification, impersonation attacks.

    • Availability Threats: DoS attacks, equipment failures.

Chapter 2: Authentication and Authorization

  • Access Control Process:

    • Identification: Claiming an identity.

    • Authentication: Proving identity (passwords, biometrics).

    • Authorization: Permission to access resources.

    • Accountability: Tracking actions taken by users.

Password Policies

  • Requirements for Passwords:

    • Length, complexity, expiration, history, resets.

  • Multi-Factor Authentication (MFA):

    • Combines multiple factors to enhance security (something you know, something you have, something you are).

Chapter 3: Privacy

  • Types of Privacy Information: PII, PHI.

  • Privacy Management Framework (PMF):

    • Principles: Management, notice, collection, use, access, disclosure, security, data quality, monitoring.

Chapter 4: Risk Management

  • Risk Types: Internal, external, multiparty risks.

  • Risk Management Steps: Identification, assessment, treatment.

  • Risk Assessment Techniques: Qualitative and quantitative.

Chapter 5: Security Controls

  • Types of Controls: Technical, administrative, physical.

  • Purpose of Controls: Prevent, detect, recover.

Chapter 6: Ethics

  • ISC2 Code of Ethics: Four canons.

  • Reporting Violations: Procedure for ethical breaches.

Chapter 7: Security Governance Processes

  • Document types: Policies, procedures, standards, guidelines.

Domain 2: Business Continuity, Disaster Recovery, and Incident Response

Chapter 8: Business Continuity

  • Business Continuity Planning (BCP): Strategies for maintaining operations during disruptions.

  • Business Impact Analysis (BIA): Assessing critical business functions and impacts.

Chapter 9: Disaster Recovery

  • Disaster Recovery Plan (DRP): Steps to restore normal operations after a disaster.

  • Types of Disasters: Natural events, technology failures, human-induced attacks.

Chapter 10: Incident Response

  • Phases of Incident Response: Preparation, detection & analysis, containment, eradication & recovery, post-incident activity.

  • Incident Response Team Composition: Include diverse skill sets (technical experts, legal, PR).

Domain 3: Access Control Concepts

Chapter 11: Physical Access Controls

  • Types of Physical Security Measures: Data center security, surveillance, visitor management.

Chapter 12: Logical Access Controls

  • Models of Access Control: DAC, MAC, RBAC.

  • Principle of Least Privilege: Minimizing permissions.

  • Segregation of Duties: Ensuring no single individual has conflicting permissions.

Domain 4: Network Security

Chapter 13: Computer Networking

  • Networking Basics: LANs, WANs, encryption protocols.

  • IP Addressing: IPv4, IPv6, and private vs. public addresses.

Chapter 14: Network Threats and Attacks

  • Types of Malware: Viruses, worms, Trojan horses.

  • Denial-of-Service Attacks: Understanding DoS vs. DDoS.

Chapter 15: Threat Identification and Prevention

  • Tools: IDS, IPS, firewalls, antivirus, vulnerability scanning.

Chapter 16: Network Security Infrastructure

  • Data Center Protection: Environmental controls, redundancy, fire prevention systems.

Chapter 17: Cloud Computing

  • Cloud Models: Public, private, hybrid, community.

  • Cloud Services: IaaS, PaaS, SaaS, DaaS.

Domain 5: Security Operations

Chapter 18: Encryption

  • Types of Encryption: Symmetric (AES), asymmetric (RSA), hashing.

Chapter 19: Data Handling

  • Data Life Cycle: Create, store, use, share, archive, destroy.

  • Data Classification: Importance for security policies.

Chapter 20: Logging and Monitoring

  • Overview of Logging: Importance of maintaining logs for audit and security analysis.

Chapter 21: Configuration Management

  • Importance of Configuration Management: Stability, control, change management.

Chapter 22: Best Practice Security Policies

  • Key Policies: Data handling, password, acceptable use, BYOD, change management.

Chapter 23: Security Awareness Training

  • Importance of Training: Keeping employees informed about security practices and potential threats.