Certification and Accreditation

Course Description

This course gives in-depth focus for Information Assurance from an INFOSEC, US defense/military, perspective. Information systems security from an INFOSEC perspective focuses on protection of information systems against unauthorized access to or modification of information, whether in storage, processing or transit, and against the denial of service to authorized users, including those measures necessary to detect, document, and counter such threats. Emphasis is upon defining the IA priorities, baseline and current snapshot posture for an organization; and establish and manage an IA defense in-depth strategy.

Learning Outcomes

• Evaluate the Organizational IA Program: The Practical and Conceptual Foundation IA and the Organization: The Challenges Basic Security Concepts, Principles, and Strategy
• Discern the Organization’s Current IA Posture Determining the Organization’s IA Baseline Determining IT Security Priorities The Organization’s IA Posture
• Establish and Manage an IA Defense in Depth Strategy Within an Organization Layer 1: IA Policies Layer 2: IA Management Layer 3: IA Architecture Layer 4: Operational Security Administration Layer 5: Configuration Management Layer 6: Life-Cycle Security Layer 7: Contingency Planning Layer 8: IA Education, Training, and Awareness Layer 9: IA Policy Compliance Oversight Layer 10: IA Incident Response Layer 11: IA Reporting

Prerequisites

• CYB613