Certified Cyber Security Professional Course

The need for Cyber Security 

CIA Triad

Vulnerability, Threat, and Risk

Risk Governance & Risk Management 

Security Architecture 

Security Governance 

Security Auditing 

Compliance 

Computer Security Architecture &  Design

Background of Cryptography

Symmetric Cryptography 

Data Encryption Standard (DES) 

Triple-DES 

The Advanced Encryption  Standard (AES) 

International Data Encryption  Algorithm (IDEA) 

Blowfish 

RC4 

RC5 

RC6 

Asymmetric Cryptography 

The Diffie-Hellman Algorithm 

RSA 

Elliptic Curve Cryptosystems (ECC)

Cryptographic Hash Functions 

Attacks against Encrypted Data 

Digital Certificates and its Format   (X.509, X.500) 

Certificate Authority, Certificate Repository, Certificate Revocation  lists  

Digital Certificate life cycle  (Initialize, Issue, Cancel)

Network Architecture, Protocols and Technologies: 

Layered Architecture, Open Systems Interconnect (OSI) Model

Transmission Control Protocol / Internet Protocol (TCP/IP)

Hybrid TCP/IP Model

Application Layer Protocols: HTTP, SNMP, DNS, POP, SMTP

Transport layer protocols: Transmission Control Protocol (TCP), User Datagram Protocol (UDP)

Network/Internet layer protocols: 

Internet Protocol (IP) v4, IPv6, IPsec protocols

Link-layer protocols: Address

Resolution Protocol (ARP) / Reverse ARP / Proxy ARP, Ethernet, VLAN

Importance of Application Security

OWASP Top 10 web application vulnerabilities

SSDLC (Secure Software Development Life Cycle)

Data Security

Data Security Controls

Endpoint Security

Host/ Endpoint Security Controls

Authorization

Authentication

Access Control

Privilege levels

Identity & Access Management Process and activities (Role-Based, Single Sign-on)

Cloud Computing Architectural Framework

Concerns & Best Practices

Governance and Enterprise Risk Management

Legal Issues: Contracts and Electronic Discovery

Compliance and Audit Management

Information Management and Data Security

Interoperability and Portability

Traditional Security, Business Continuity, and Disaster Recovery

Data Centre Operations

Incident Response

Application Security

Encryption and Key Management

Identity, Entitlement, and Access Management

Virtualization

Security as a Service

Phase 1 —Reconnaissance: Adversary identifies and selects a Target

Phase 2 —Weaponize: Adversary packages an exploit into a payload designed to execute on the targeted computer/network

Phase 3 —Deliver: Adversary delivers the payload to the target system

Phase 4 —Exploit: Adversary code is executed on the target system

Phase 5 —Install: Adversary installs remote access software

that provides a persistent presence within the targeted environment or system

Phase 6 —Command and Control: Adversary employs remote access

mechanisms to establish a command and control channel with the compromised device

Phase 7 —Act on Objectives: Adversary pursues intended

objectives e.g., data exfiltration, lateral movement to other targets

Key Security Business Processes

Corp. & Security Governance

IT Strategy management

Portfolio/Program/Project management

Change management

Supplier (third party) management

Problem management

Knowledge management

Info-sec management

BCP

IT Operations management

Overview of top 20 security controls

Business Communication

Preparation for the Interview

Presentation Skills

Resume Building Technique