Cybersecurity and Information Security

  1. System and Endpoint Security
    1. Operating System Security
      1. OS Hardening Principles
        1. Security Configuration
          1. Baseline Configuration
            1. Security Templates
              1. Configuration Management
              2. Service Management
                1. Unnecessary Service Removal
                  1. Service Configuration
                    1. Service Monitoring
                    2. User Account Management
                      1. Account Policies
                        1. Privilege Management
                          1. Account Monitoring
                        2. Access Control Systems
                          1. Discretionary Access Control
                            1. Owner-based Permissions
                              1. Access Control Lists
                              2. Mandatory Access Control
                                1. Security Labels
                                  1. Clearance Levels
                                    1. Information Flow Control
                                    2. Role-Based Access Control
                                      1. Role Definition
                                        1. Role Assignment
                                          1. Role Hierarchies
                                          2. Attribute-Based Access Control
                                            1. Policy-based Access
                                              1. Dynamic Authorization
                                            2. Platform-Specific Security
                                              1. Windows Security
                                                1. User Account Control
                                                  1. Windows Security Features
                                                    1. Group Policy Management
                                                      1. Windows Defender
                                                      2. Linux Security
                                                        1. File System Permissions
                                                          1. SELinux Implementation
                                                            1. AppArmor Configuration
                                                              1. Kernel Security
                                                              2. macOS Security
                                                                1. System Integrity Protection
                                                                  1. Gatekeeper
                                                                    1. FileVault Encryption
                                                                2. Endpoint Protection Technologies
                                                                  1. Antimalware Solutions
                                                                    1. Signature-based Detection
                                                                      1. Virus Definitions
                                                                        1. Update Mechanisms
                                                                        2. Heuristic Analysis
                                                                          1. Behavioral Detection
                                                                            1. Machine Learning
                                                                            2. Cloud-based Protection
                                                                              1. Reputation Services
                                                                                1. Real-time Analysis
                                                                              2. Endpoint Detection and Response
                                                                                1. Behavioral Monitoring
                                                                                  1. Process Monitoring
                                                                                    1. Network Activity Analysis
                                                                                    2. Threat Hunting Capabilities
                                                                                      1. IOC Detection
                                                                                        1. Threat Intelligence Integration
                                                                                        2. Incident Response Features
                                                                                          1. Automated Response
                                                                                            1. Forensic Capabilities
                                                                                          2. Host-based Security Controls
                                                                                            1. Host-based Firewalls
                                                                                              1. Rule Configuration
                                                                                                1. Application Control
                                                                                                2. Host Intrusion Prevention
                                                                                                  1. Policy Enforcement
                                                                                                    1. Attack Prevention
                                                                                                    2. Data Loss Prevention
                                                                                                      1. Content Inspection
                                                                                                        1. Policy Enforcement
                                                                                                    3. Mobile Device Security
                                                                                                      1. Mobile Security Challenges
                                                                                                        1. Device Diversity
                                                                                                          1. Operating System Fragmentation
                                                                                                            1. Application Security
                                                                                                              1. Data Protection
                                                                                                              2. Mobile Device Management
                                                                                                                1. Device Enrollment
                                                                                                                  1. Policy Configuration
                                                                                                                    1. Remote Management
                                                                                                                      1. Device Compliance
                                                                                                                      2. Mobile Application Security
                                                                                                                        1. App Store Security
                                                                                                                          1. Application Permissions
                                                                                                                            1. Code Signing
                                                                                                                              1. Runtime Protection
                                                                                                                              2. BYOD Security
                                                                                                                                1. Policy Development
                                                                                                                                  1. Device Separation
                                                                                                                                    1. Data Containerization
                                                                                                                                      1. Privacy Considerations
                                                                                                                                    2. Physical Security Controls
                                                                                                                                      1. Facility Security
                                                                                                                                        1. Perimeter Security
                                                                                                                                          1. Access Control Systems
                                                                                                                                            1. Badge Systems
                                                                                                                                              1. Biometric Authentication
                                                                                                                                                1. Visitor Management
                                                                                                                                                2. Environmental Controls
                                                                                                                                                  1. HVAC Security
                                                                                                                                                    1. Power Protection
                                                                                                                                                      1. Fire Suppression
                                                                                                                                                    2. Equipment Security
                                                                                                                                                      1. Asset Tracking
                                                                                                                                                        1. Device Locks
                                                                                                                                                          1. Secure Storage
                                                                                                                                                            1. Equipment Disposal
                                                                                                                                                            2. Media Security
                                                                                                                                                              1. Data Classification
                                                                                                                                                                1. Secure Storage
                                                                                                                                                                  1. Data Sanitization
                                                                                                                                                                    1. Destruction Methods

                                                                                                                                                                Previous

                                                                                                                                                                3. Network Security Architecture

                                                                                                                                                                Go to top

                                                                                                                                                                Next

                                                                                                                                                                5. Application Security and Secure Development