한번에 마스터하는 CISSP 국제자격증

Chapter 1 Security Management Practices
1. 보안(Security)
2. 보안의 3요소(C. I. A Traid)
3. 보안관리(Security Management)
4. 역할 및 책임(Roles & Responsibility)
5. Due Care & Due Diligence
6. Data Classification(데이터 계층화)
7. Policy, Baseline, Standard, Guideline, Procedure, Control, Awareness & Training
8. People(사람)
[연습문제]

Chapter 2 Access Control Systems and Methodology
1. 접근(Access)
2. 접근제어(Access Control)
3. 접근기준(Access Criteria)
4. 공통접근모드(Common Access Modes)
5. 접근제어모델(Access Control Model)
7. 접근제어관리(Access Control Administration)
8. 접근권한 부여 원칙
9. Access Control Attack
10. 식별, 인증, 접근제어, 인가, 감사(Identification, Authentication, Access Control, Authorization, Audit)
[연습문제]

Chapter 3 Telecommunication and Network Security
1. ISO의 OSI Model
2. Communications and Network Security
3. Internet/Intranet/Extranet
4. Protocols
5. Communication Security Techniques
6. Facsimile Security
7. Security Voice Communications
8. Network Attacks and Countermeasures
[연습문제]

Chapter 4 Cryptography
1. 암호학의 역사
2. 암호학(Cryptography)
3. 공개키 기반 구조(PKI: Public Key Infrastructure)
4. 암호의 목적
5. 키관리(Key Management)
6. 키에스크로(Key Escrow)
7. Link Encryption과 End-to-End Encryption
8. 보안프로토콜(Security Protocol)
9. Attack
[연습문제]

Chapter 5 Security Architecture and Models
1. 컴퓨터 구조(Computer Architecture)
2. 컴퓨터 기본 구조
3. EVALUATION CRITERIA(평가기준)
[연습문제]

Chapter 6 Business Continuity Planning and Disaster Recovery Planning
1. 위험관리(Risk Management)와 비상계획(Contingency Plan)과의 관계
2. 비상계획 형태(Type of Contingency Plan)
3. 비상계획 수립절차
[연습문제]

Chapter 7 Physical Security
1. Facility Requirement Planning
2. Facility Security Management
3. 인력관리
4. 환경제어(Environmental Control)
5. 화재예방, 감지, 진압(Fire Prevention, Detection, Suppression)
6. Facility 접근제어(Facility Access Control)
[연습문제]

Chapter 8 Laws, Investigation, and Ethics
1. 컴퓨터 범죄 유형
2. 컴퓨터 범죄
3. 법의 종류
4. 지적 재산권법(Intellectual Property Law)
5. 수입/수출법(Import/Export Law)
6. 개인정보보호법(Information Privacy Law)
7. 기타 미국 법들
8. 컴퓨터 범죄(Computer Crime)
9. 증거(Evidence)
10. 윤리(Ethics)
[연습문제]

Chapter 9 Application and System Development Security
1. Database and Data Warehousing
2. System Development Controls
3. Malicious Code
4. Method of Attack
[연습문제]

Chapter 10 Operation Security
1. 운영보안(Operational Security)
2. 보안제어(Security Control)
[연습문제]