Chapter Title Slide
Understand the multidisciplinary nature of Information Security
Understand the CISO role
List some of the management roles in Information Security
List some of the Technical and Non-Technical roles in Information Security
Chapter Summary Slide
There is no single person who can cover all responsibilities
There is no single department that can cover all responsibilities
Cyber Security risk is managed in different ways
By individuals with different skills
Who form part of different teams
Cyber Security is a team effort
Overall Responsibility lies with:
CIO
Chief Information Officer
Enable business growth through technology
CISO
Chief Information Security Officer
Ensures technology is secure
Historically the CISO has reported to the CIO
Some organisations allow direct reporting to the CEO or board
Executive Cyber Security Roles
Both set strategy and direction
Represent their domain (IT or security) at the board level
Are accountable for risk, compliance, and long…
Can you change the "revision guide" button to be a drop down menu and call it "lesson recaps" and rename the revision.html to "lesson_1.html"
can you create a separate page to to serve as a recap for these slides? This is the text from some slides. Dont quote it verbatim but identify the underlying themes and create a section that focusses on each one - like a revision guide. Here is the content: In this course, you will engage in activities that perform probing actions and may be used to compromise computer systems and networks
You will perform these actions to obtain the skills required to make effective computer security risk assessments
Performing these actions against systems or networks that you are not authorized to access is unethical and subject to legal prosecution in most jurisdictions
Disclaimer
Security Fundamentals
Chapter 1
Chapter Title Slide
Understand the CIA triad
Understand the means and motives of different threat actors
Find specific guidance on APTs
Understand the concept of AAA
APT - Advanced Persistent Threat AAA - Authentication Authorisation and Accounting
Chapter Summary Slide
Confidentiality
Information can only be read by authorised users
Integrity
Information can only be modified by authorised users
Availability
Information is accessible to authorised users - in a timely manner
Non-repudiation
Changes and access to data is recorded in a way which is undeniable
Information Security
Explain the construction of the prompt and what each part means ie USER@HOST:/CURRENT/WORKIN…
Can you also add a section before common ports about the TCP 3 way handshake and how we can use this to scan ports. Include some very basic and simple nmap command examples
create a Comptia Security + Knowlage checklist page which is designed to be printable. It should cover basic linux CLI commands, What a MAC address is and how it gets traffic to the next hop, What an IP address is and how every computer has one, What ports are and how every service the computer provides will listen on a port. Include a diagram of the TCP/IP stack with an description next to some fake addresses. for example "Layer 2 : Addressed to the next hop, in this case the default gateway. Layer 3 : addressed to the web sites IP address. Layer 4 : Addressed to the port the web server is listening on. Layer 7 : a message the web server will understand asking for the main page of the site." use diagrams and examples where appropriate.
