CISA Domain 5 - Protection of Information Assets - Pratical

Explore the information security management system (ISMS) as a framework for designing, implementing, and maintaining risk-based controls that protect confidentiality, integrity, and availability, aligned with ISO 27001.

Identify information security classifications and controls, distinguishing preventive and detective controls, and explain how standards and guidelines guide their implementation to reduce vulnerabilities and risk.

Learn incident management, including prevention, preparation, detection of unexpected events, and response to incidents such as attacks or ransomware, while planning and configuring high-availability infrastructure with layered security.

Plan and implement high availability and secure infrastructure for incident readiness, then monitor, detect, respond, recover, and follow prevention, risk assessment, investigation, and digital forensics with evidence handling.

Identify and authenticate users while enforcing authorization and various access controls, including MAC address, DAC, RBAC, ABAC, and location-based rules; monitor and audit with logs, IDS, and SIEM.

Apply multi-factor authentication using something you know, something you have, and something you are, with biometric and authenticator. Align access control with auditing, monitoring, and compliance to protect information assets.

Design and defend infrastructure security with perimeter controls, firewall types, and network segmentation using vlans. Implement ai-driven antivirus and edr/xdr, with mdm, access controls, and backups.

Explore cryptography fundamentals, including symmetric and asymmetric keys, public/private keys, and digital certificates, and analyze threats from brute force to man-in-the-middle; cover physical security, access control, and data center safeguards.