CompTIA CASP + CAS-003: Beveiligingsbeoordelingen uitvoeren

Course: 52 Minutes

• Course Introduction
• Methods to Assess Security
• Reconnaissance, Fingerprinting, & Social Engineering
• Open-source Intelligence (OSINT)
• Routing Tables, DNS Records, and Search Engines
• Security Assessment Types
• Penetration Testing and Assessment
• Exercises and Audits

CompTIA CASP+ CAS-003: Integrating Network and Security Components, Concepts, and Architectures

Course: 1 Hour, 26 Minutes

• Course Introduction
• Physical and Virtual Devices (Part 1)
• Physical and Virtual Devices (Part 2)
• Application and Protocol-aware Technologies
• Advanced Network Design (Part 1)
• Advanced Network Design (Part 2)
• Complex Solutions for Data Flow
• Secure Configuration and SDN
• Network Management and Monitoring Tools
• Advanced Configuration of Devices (Part 1)
• Advanced Configuration of Devices (Part 2)
• Advanced Configuration of Devices (Part 3)

CompTIA CASP+ CAS-003: Organizational Security and Privacy Policies

Course: 40 Minutes

• Course Introduction
• Process and Policy Life Cycle Management (Part 1)
• Process and Policy Life Cycle Management (Part 2)
• Partnering with HR, Legal, and Executives
• Common Business Documentation (Part 1)
• Common Business Documentation (Part 2)
• Security Requirements for Contracts
• General Principles for Sensitive Information
• Developing Standard Policies and Practices (part 1)
• Developing Standard Policies and Practices (part 2)

CompTIA CASP+ CAS-003: Selecting Software Security Controls

Course: 42 Minutes

• Course Introduction
• Application Security Design Considerations
• Specific Application Attacks
• Application Vulnerabilities and Issues
• Additional Application Security Concerns
• Application Data Issues
• Sandboxing and Enclaves
• Client-side Processing
• Server-side Processing
• OS and Firmware Vulnerabilities

CompTIA CASP+ CAS-003: Integrating Security Controls for Host Devices

Course: 48 Minutes

• Course Introduction
• Implementing Trusted OSs
• Least Functionality
• Endpoint Security Software
• Host-based IDS and IPS
• Hardening Hosts
• Scripting and Replication
• Hardening Wireless Host Peripherals
• Securing Physical Host Peripherals
• Boot Loader Protections
• Terminal Services and Application Delivery Services

CompTIA CASP+ CAS-003: Implementing Cryptographic Techniques

Course: 59 Minutes

• Course Introduction
• Cryptographic Techniques
• Cryptographic Mechanisms
• Cryptographic Data Processing
• Cryptographic Encryption - Steganography
• Cryptographic Modules and Processors
• Cryptographic Implementations
• SSH, S/MIME, and SSL/TLS
• Cryptographic Applications
• Public Key Infrastructure (PKI)
• Blockchain and Mobility

CompTIA CASP+ CAS-003: Risk Metric Scenarios for Enterprise Security

Course: 36 Minutes

• Course Introduction
• Reviewing Control Effectiveness
• Reverse Engineering and Deconstruction
• Collecting and Analyzing Metrics
• Prototyping and Testing Multiple Solutions
• Creating Benchmarks and Compare to Baselines
• Analyzing Cyber Defense Trends
• Analyzing Metrics for Business Needs (Part 1)
• Analyzing Metrics for Business Needs (Part 2)
• Using Judgment to Solve Problems

CompTIA CASP+ CAS-003: Integrating and Troubleshooting Advanced AAA Technologies

Course: 40 Minutes

• Course Introduction
• Advanced Authentication
• Access Management
• Authorization
• Attestation, Proofing, and Propagation
• SAML and OpenID Federation
• Shibboleth and WAYF Federation Services
• Trust Models

CompTIA CASP+ CAS-003: Secure Communication and Collaboration Solutions

Course: 31 Minutes

• Course Introduction
• Remote Access Resources and Services
• Desktop and Application Sharing
• Remote Assistance
• Conferencing and Web Services
• Video and Audio Services
• Storage and Document Collaboration
• IM and Presence
• E-mail and Telephony
• Social Media and Cloud Services

CompTIA CASP+ CAS-003: Integrating Hosts, Storage, and Applications in the Enterprise

Course: 50 Minutes

• Course Introduction
• Adapting Data Flow Security
• Data Flow Security Standards
• Interoperability Issues
• Resilience Issues
• Data Security Considerations
• Resource Provisioning and De-provisioning
• Merger and Acquisition Design Considerations
• Logical Network Segmentation and Diagramming
• Security Issues with Application Integration

CompTIA CASP+ CAS-003: Business and Industry Influences and Risks

Course: 48 Minutes

• Course Introduction
• Risk Management of New Initiatives
• New or Changing Business Models and Strategies
• Security Concerns of Integrating Diverse Industries
• Business and Industry Policies (Part 1)
• Business and Industry Policies (Part 2)
• Internal Influences
• External Influences
• Impacts of Deperimeterization (Part 1)
• Impacts of Deperimeterization (Part 2)

CompTIA CASP+ CAS-003: Risk Mitigation Strategies and Controls

Course: 57 Minutes

• Course Introduction
• CIA-based Decisions for the Organization
• Determining Minimum Required Security Controls
• System-specific Worst-case Analysis
• Risk Determination
• Translating Risk into Business Terms
• Risk Treatment
• Risk Management Processes
• Business Continuity Planning
• IT Governance and Frameworks
• Enterprise Resilience and Continual Improvement

CompTIA CASP+ CAS-003: Interacting across Diverse Business Units

Course: 30 Minutes

• Course Introduction
• Interacting with Sales and HR Staff
• Interpreting Goals with Programmers and Admins
• Communicating Security Requirements with the C-Suite
• Expressing Goals with DR Stakeholders
• Providing Objective Guidance and Recommendations
• Establishing Effective Collaboration
• Governance, Risk, and Compliance Committee

CompTIA CASP+ CAS-003: Implementing Incident Response and Recovery

ourse: 43 Minutes

• Course Introduction
• E-discovery
• Data Breach Detection, Collection, and Analytics
• Data Breach Isolation, Recovery, and Response
• Facilitating Incident Detection and Response
• Incident and Emergency Response
• Disaster Recovery and Order of Volatility
• Incident Response Support Tools
• Incident or Breach Severity
• Post-incident Response

CompTIA CASP+ CAS-003: Applying Research Methods for Trend and Impact Analysis

Course: 26 Minutes

• Course Introduction
• Best Practices for Ongoing Research
• Researching New Technologies
• Threats and Attacks
• Zero-day Mitigation Controls
• Researching Social Media and Integration
• Big Data, Machine Learning & Artificial Intelligence
• Global Information Assurance (IA) Industry
• Global Information Assurance (IA) Community

CompTIA CASP+ CAS-003: Integrating Cloud and Virtualization Technologies in the Enterprise

Course: 44 Minutes

• Course Introduction
• Technical Deployment Models
• Cloud Service Models
• Type 1 vs. Type 2 Hypervisors
• Pros and Cons of Virtualization
• Cloud Augmented Security Services
• CASB and Sec-as-a-Service
• Host Comingling Vulnerabilities
• Data Security Considerations
• Resource Provisioning and De-provisioning

CompTIA CASP+ CAS-003: Integrating Controls for Mobile and Small Form Factor Devices

Course: 49 Minutes

• Course Introduction
• Enterprise Mobility Management
• Application, Content, and Data Management
• Enterprise Mobility Issues
• Mobility Security and Privacy Concerns
• Rooting, Jailbreaking, and Sideloading
• Tokenization and TPM
• Tethering, Bluetooth, and Gestures
• Mobility Biometrics
• Wearable Technology

CompTIA CASP+ CAS-003: Implementing Security Activities across the Technology Life Cycle

Course: 43 Minutes

• Course Introduction
• Systems DLC Requirements and Acquisition
• Systems DLC Operations, Monitoring, and Maintenance
• Systems DLC Configuration and Change Management
• Software DLC Applications and Software Assurance
• Software DLC NX/XN Bit, ASLR, and Code Quality
• Software DLC Testing and DevOps
• Agile, Waterfall, and Spiral Software Development
• Security Requirements Traceability Matrix (SRTM)
• Testing and Validation in the Software DLC
• Adapting Adequate Solutions
• Asset Management and Inventory Contro