Become ISC2 Certified in Cybersecurity

Paulo Carreira is a Professor of Information Systems and a Fellow of Information Privacy, known for his expertise in security and privacy. With top certifications like CISSP and ISO 27001, Paulo brings a deep, practical understanding to his writing. He explains complex security concepts in a simple way that helps you prepare for certification. Andreé Miranda Louraço is a Cybersecurity Manager at Red Bull, known for designing global security programs. As a CISSP with proven technical expertise, Andreé brings real-world experience to his writing. He helps you understand the practical skills needed to succeed in a cybersecurity career.

• INTRODUCTION PART 1: SECURITY PRINCIPLES 1 SECURITY CONCEPTS OF INFORMATION ASSURANCE 2 RISK MANAGEMENT 3 UNDERSTANDING SECURITY CONTROLS 4 UNDERSTANDING GOVERNANCE PROCESSES AND ELEMENTS 5 ISC2 CODE OF ETHICS PART 2: INCIDENT RESPONSE, BUSINESS CONTINUITY, AND DISASTER RECOVERY CONCEPTS 6 INCIDENT RESPONSE 7 BUSINESS CONTINUITY PLANNING 8 DISASTER RECOVERY PLAN PART 3: CONCEPTS OF ACCESS CONTROL 9 ACCESS CONTROL 10 PHYSICAL ACCESS CONTROLS  11 LOGICAL ACCESS CONTROLS PART 4: NETWORK SECURITY 12 NETWORKING 13 NETWORK THREATS AND ATTACKS 14 ON-PREMISES AND CLOUD INFRASTRUCTURE PART 5: SECURITY OPERATIONS 15 DATA SECURITY 16 SYSTEM HARDENING 17 SECURITY POLICY BEST PRACTICES 18 SECURITY AWARENESS TRAINING PART 6: PRACTICE EXAMS 19 EXAM 1 20 EXAM 2 APPENDICES APPENDIX A: GLOSSARY OF TERMS APPENDIX B: LIST OF ACRONYMS APPENDIX C: REFERENCE MATERIALS APPENDIX D: ANSWERS TO REVIEW QUESTIONS APPENDIX E: ADDITIONAL RESOURCES FOR FURTHER STUDY