Security+ Certification - Operational Security Domain

This course is for beginners and IT pros looking to get certified and land an entry level Cyber Security position paying upwards of six figures!  There are currently over a million Cyber Security job openings global and demand is greatly outpacing supply which means more opportunity, job security and higher pay for you! 

The Security+ exam covers six domains and this course focuses on the second domain which is 'Compliance and Operational Security' domain.

• Principles of security
• HR and Personnel security
• Data privacy
• Risk management
• Physical security
• Environmental security
• Data classification
• Operational security
• Incident response
• Change management
• Disaster recovery
• Forensics

We will cover the foundational principles of information security which include confidentiality, integrity and availability.  We will also identify common security services and the mechanisms used to implement those services. 

People are arguably the most important link in the chain when it comes to security.   Making sure employees, contractors and business partners protect corporate data and that their privacy is protected as well is the responsibility of all involved.  This course will help you understand how to strengthen the people component of information security programs. 

Data Privacy is a key consideration for business as they leverage personal information for business purposes. I will show you data privacy regulations, threats and protection mechanisms. 

Risk Management is what fundamentally drives information security programs.  Learn how to measure, manage and validate information security risks.  Physical security measures may not be the most glamorous part of information security but they are an important component of the bigger picture.   Because if intruders have access to your HW it’s only a matter of time before they get access to the data that’s on it.   

A subcomponent of physical security involves the management of environmental controls.   In this section we will go over some of the best practices associated with some of these types of controls and how implementing them can enhance security by preserving CIA (Confidentiality, Integrity and Availability).  

Data classification is the process of organizing data into categories for its most effective and efficient use.   Learn how to effectively classify data and identify classification driven best practices controls.

Once we have a Risk Management program in place we need to implement operational security to manage the day to day aspects of security.  You will  learn about Operational Security Controls, what they consist of and how they help us to incrementally manage risk on a daily basis.You will learn how to formulate and execute an incident response plan which defines policies, in specific terms, which identify an incident and provide  step-by-step processes that should be followed when an incident occurs.

All IT environments require changes to be made on a fairly constant basis for the purpose of upkeep and enhancements.   After completing this lesson you will understand best practices for minimizing risk via configuration and change management.   

While at first glance DR might not seem like a natural fit with cybersecurity after further analysis we realize that disasters are threats that can inflict much more damage than any hacker.   Upon completing this lesson you will understand how to perform disaster recovery planning and design strategies for dealing with disasters. 

You will also learn how to conduct forensics investigations using digital forensics technologies and techniques in this lesson.