Hugging Face's logo

Spaces:
scotty055
/
security-quickcheat-pro
Running

App Files Community
security-quickcheat-pro / lesson_2.html
scotty055's picture
scotty055
Can you include a section at the bottom which summarises some of the key activities from the exercise "Configuring Examples of Security Control Types". The lab uses windows folder access permissions to control user access based on active directory groups like "domain_users" and "domain_admins" - Controlling user folder access in thie way is a *preventative control*. Windows local security policy can be used to implement file and folder access logging which is a form of *detective control* file and folder auditing can also be used to log deletions. The exercise also uses local security policy to create a logon banner message which is used to remind users that access to the machine is subject to the AUP, this warning serves as a *directive control* encouraging compliance with the AUP. The exercise then demonstrates 2 *corrective controls*. The first is built into windows and automatically recovers from a crash using what is commonly known as the blue screen of death BSOD. The second is a script which uses powershell SigVerif to detect changes in an important file and return the file to its proper state when a change is detected.
ef9d0bc verified
Raw History Blame Contribute Delete
14.9 kB
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Lesson 2 Recap | Security+ QuickCheat Pro</title>
<script src="https://cdn.tailwindcss.com"></script>
<script src="https://unpkg.com/feather-icons"></script>
<style>
@media print {
.no-print {
display: none !important;
}
body {
padding: 0;
margin: 0;
background: white;
color: black;
}
.print-section {
page-break-inside: avoid;
}
}
.info-card {
background: linear-gradient(145deg, #f1f5f9, #e2e8f0);
border-radius: 0.5rem;
}
.role-card {
border-left: 4px solid #3b82f6;
}
</style>
</head>
<body class="bg-gray-50 text-gray-800 font-sans">
<div class="container mx-auto px-4 py-8 max-w-4xl">
<!-- Header -->
<header class="mb-8 text-center no-print">
<h1 class="text-4xl font-bold text-primary mb-2">Lesson 2 Recap</h1>
<p class="text-lg text-secondary">Information Security Roles & Responsibilities</p>
<div class="flex justify-center gap-4 mt-4">
<button onclick="window.print()" class="px-6 py-2 bg-primary text-white rounded-lg hover:bg-blue-700 transition flex items-center">
<i data-feather="printer" class="mr-2"></i> Print Guide
</button>
<a href="index.html" class="px-6 py-2 bg-secondary text-white rounded-lg hover:bg-green-700 transition flex items-center">
<i data-feather="arrow-left" class="mr-2"></i> Back to Main
</a>
</div>
</header>
<!-- Main Content -->
<main class="bg-white shadow-lg rounded-lg p-6 print:p-0">
<!-- Executive Roles Section -->
<section class="mb-10 print-section">
<h2 class="text-2xl font-bold text-primary border-b-2 border-primary pb-2 mb-4 flex items-center">
<i data-feather="users" class="mr-2"></i> Executive Security Roles
</h2>
<div class="grid grid-cols-1 md:grid-cols-2 gap-6">
<div class="info-card p-4">
<h3 class="font-semibold text-secondary mb-2">CIO (Chief Information Officer)</h3>
<ul class="list-disc pl-5 space-y-2">
<li>Enables business growth through technology</li>
<li>Sets IT strategy and direction</li>
<li>Accountable for IT risk and compliance</li>
<li>Driven by business agility</li>
</ul>
</div>
<div class="info-card p-4">
<h3 class="font-semibold text-secondary mb-2">CISO (Chief Information Security Officer)</h3>
<ul class="list-disc pl-5 space-y-2">
<li>Ensures technology is secure</li>
<li>Sets security strategy and direction</li>
<li>Accountable for security risk and compliance</li>
<li>Driven by risk control</li>
<li>May report to CIO, CEO, or board</li>
</ul>
</div>
</div>
</section>
<!-- Management Roles Section -->
<section class="mb-10 print-section">
<h2 class="text-2xl font-bold text-primary border-b-2 border-primary pb-2 mb-4 flex items-center">
<i data-feather="briefcase" class="mr-2"></i> Management Roles
</h2>
<div class="grid grid-cols-1 md:grid-cols-3 gap-4">
<div class="role-card bg-gray-50 p-4 rounded-lg">
<h3 class="font-semibold text-secondary">Security Operations</h3>
<ul class="list-disc pl-5 mt-2 space-y-1 text-sm">
<li>Security Operations Center (SOC)</li>
<li>Incident Response</li>
</ul>
</div>
<div class="role-card bg-gray-50 p-4 rounded-lg">
<h3 class="font-semibold text-secondary">Risk & Compliance</h3>
<ul class="list-disc pl-5 mt-2 space-y-1 text-sm">
<li>Security Risk Management</li>
<li>Governance</li>
<li>Compliance</li>
</ul>
</div>
<div class="role-card bg-gray-50 p-4 rounded-lg">
<h3 class="font-semibold text-secondary">Technical Leadership</h3>
<ul class="list-disc pl-5 mt-2 space-y-1 text-sm">
<li>Security Engineering</li>
<li>Application Security</li>
<li>Project Management</li>
</ul>
</div>
</div>
</section>
<!-- Technical Roles Section -->
<section class="mb-10 print-section">
<h2 class="text-2xl font-bold text-primary border-b-2 border-primary pb-2 mb-4 flex items-center">
<i data-feather="code" class="mr-2"></i> Technical Roles
</h2>
<div class="grid grid-cols-1 md:grid-cols-2 gap-6">
<div>
<h3 class="font-semibold text-secondary mb-2">Defensive Security</h3>
<ul class="list-disc pl-5 space-y-2">
<li><strong>Security Analyst:</strong> Monitors and analyzes threats</li>
<li><strong>Threat Hunter:</strong> Proactively searches for threats</li>
<li><strong>Malware Analyst:</strong> Analyzes malicious software</li>
</ul>
</div>
<div>
<h3 class="font-semibold text-secondary mb-2">Offensive Security</h3>
<ul class="list-disc pl-5 space-y-2">
<li><strong>Penetration Tester:</strong> Ethical hacker testing defenses</li>
<li><strong>Exploit Developer:</strong> Researches vulnerabilities</li>
</ul>
</div>
<div>
<h3 class="font-semibold text-secondary mb-2">Engineering & Architecture</h3>
<ul class="list-disc pl-5 space-y-2">
<li><strong>Security Engineer:</strong> Builds security systems</li>
<li><strong>Cloud Security Engineer:</strong> Secures cloud environments</li>
</ul>
</div>
<div>
<h3 class="font-semibold text-secondary mb-2">Intelligence & Analytics</h3>
<ul class="list-disc pl-5 space-y-2">
<li><strong>Threat Intelligence Analyst:</strong> Researches emerging threats</li>
<li><strong>Security Data Scientist:</strong> Uses data to improve security</li>
</ul>
</div>
</div>
</section>
<!-- Non-Technical Roles Section -->
<section class="mb-10 print-section">
<h2 class="text-2xl font-bold text-primary border-b-2 border-primary pb-2 mb-4 flex items-center">
<i data-feather="user" class="mr-2"></i> Non-Technical Roles
</h2>
<div class="grid grid-cols-1 md:grid-cols-2 gap-6">
<div>
<h3 class="font-semibold text-secondary mb-2">Governance & Compliance</h3>
<ul class="list-disc pl-5 space-y-2">
<li><strong>Cybersecurity Policy Analyst:</strong> Develops security policies</li>
<li><strong>Compliance Specialist:</strong> Ensures regulatory compliance</li>
</ul>
</div>
<div>
<h3 class="font-semibold text-secondary mb-2">Business & Strategy</h3>
<ul class="list-disc pl-5 space-y-2">
<li><strong>Cybersecurity Program Manager:</strong> Oversees security programs</li>
<li><strong>Third-Party Risk Manager:</strong> Manages vendor security</li>
</ul>
</div>
<div>
<h3 class="font-semibold text-secondary mb-2">People & Culture</h3>
<ul class="list-disc pl-5 space-y-2">
<li><strong>Training Coordinator:</strong> Organizes security awareness</li>
<li><strong>Communications Officer:</strong> Liaises between teams</li>
</ul>
</div>
<div>
<h3 class="font-semibold text-secondary mb-2">Legal & Privacy</h3>
<ul class="list-disc pl-5 space-y-2">
<li><strong>Data Protection Officer:</strong> Ensures GDPR compliance</li>
<li><strong>Cyber Legal Advisor:</strong> Provides legal guidance</li>
</ul>
</div>
</div>
</section>
<!-- Key Concepts Section -->
<section class="print-section">
<h2 class="text-2xl font-bold text-primary border-b-2 border-primary pb-2 mb-4 flex items-center">
<i data-feather="alert-circle" class="mr-2"></i> Key Security+ Concepts
</h2>
<div class="bg-primary bg-opacity-10 p-4 rounded-lg">
<h3 class="font-semibold text-primary mb-2">Security as a Team Effort</h3>
<ul class="list-disc pl-5 space-y-2">
<li>No single person or department can cover all security responsibilities</li>
<li>Requires multidisciplinary approach with diverse skills</li>
<li>Different teams collaborate to manage cyber risk</li>
<li>Security Operations Center (SOC) acts as the "nerve center"</li>
<li>DevSecOps integrates security into development ("Shift Left")</li>
</ul>
</div>
<div class="mt-6">
<h3 class="font-semibold text-secondary mb-2">Core InfoSec Competencies</h3>
<div class="grid grid-cols-1 md:grid-cols-2 gap-4">
<ul class="list-disc pl-5 space-y-2">
<li>Risk assessment and control testing</li>
<li>Secure software/hardware configuration</li>
<li>User access control management</li>
<li>Log analysis and monitoring</li>
</ul>
<ul class="list-disc pl-5 space-y-2">
<li>Incident response procedures</li>
<li>Disaster recovery planning</li>
<li>Security training development</li>
<li>Secure coding practices</li>
</ul>
</div>
</div>
</section>
<!-- Security Controls Exercise Section -->
<section class="mt-10 print-section">
<h2 class="text-2xl font-bold text-primary border-b-2 border-primary pb-2 mb-4 flex items-center">
<i data-feather="settings" class="mr-2"></i> Security Control Types Exercise
</h2>
<div class="grid grid-cols-1 md:grid-cols-2 gap-6">
<div class="bg-gray-50 p-4 rounded-lg">
<h3 class="font-semibold text-secondary mb-2">Preventative Controls</h3>
<ul class="list-disc pl-5 space-y-2">
<li>Windows folder access permissions</li>
<li>Active Directory group-based access (Domain Users/Admins)</li>
<li>Restricts unauthorized access to files/folders</li>
</ul>
</div>
<div class="bg-gray-50 p-4 rounded-lg">
<h3 class="font-semibold text-secondary mb-2">Detective Controls</h3>
<ul class="list-disc pl-5 space-y-2">
<li>Windows Local Security Policy file/folder auditing</li>
<li>Logs access attempts and modifications</li>
<li>Tracks file deletions for investigation</li>
</ul>
</div>
<div class="bg-gray-50 p-4 rounded-lg">
<h3 class="font-semibold text-secondary mb-2">Directive Controls</h3>
<ul class="list-disc pl-5 space-y-2">
<li>Logon banner messages via Local Security Policy</li>
<li>Reminds users of Acceptable Use Policy (AUP)</li>
<li>Encourages compliance through awareness</li>
</ul>
</div>
<div class="bg-gray-50 p-4 rounded-lg">
<h3 class="font-semibold text-secondary mb-2">Corrective Controls</h3>
<ul class="list-disc pl-5 space-y-2">
<li>Windows automatic crash recovery (BSOD)</li>
<li>PowerShell SigVerif script to detect/file changes</li>
<li>Restores files to known good state when altered</li>
</ul>
</div>
</div>
</section>
</main>
<!-- Footer -->
<footer class="mt-12 text-center text-sm text-gray-500 no-print">
<p>Lesson 2 Recap - Security+ QuickCheat Pro</p>
<p class="mt-1">For optimal printing, use Chrome/Firefox and select "Background graphics" in print settings</p>
</footer>
</div>
<script>
feather.replace();
</script>
</body>
</html>