Topics Covered in Course

• Discuss the role of access control in information systems, and identify and discuss the four fundamental functions of access control systems
• Define authentication and explain the three commonly used authentication factors
• Describe firewall technologies and the various categories of firewalls

• Explain the various approaches to firewall implementation
• Identify the various approaches to control remote and dial-up access by authenticating and authorizing users
• Describe virtual private networks (VPNs) and discuss the technology that enables them
• Identify and describe the categories and models of intrusion detection and prevention systems
• Describe the detection approaches employed by modern intrusion detection and prevention systems
• Define and describe honeypots, honeynets, and padded cell systems
• List and define the major categories of scanning and analysis tools and describe the specific tools used within each category
• Chronicle the most significant events and discoveries in the history of cryptology
• Explain the basic principles of cryptography
• Describe the operating principles of the most popular cryptographic tools
• List and explain the major protocols used for secure communications
• Explain how an organization's information security blueprint becomes a project plan
• Explain the significance of the project manager's role in the success of an information security project
• Discuss the many organizational considerations that a project plan must address
• Describe the need for professional project management for complex projects
• Discuss technical strategies and models for implementing a project plan
• List and discuss the nontechnical problems that organizations face in times of rapid change
• Discuss the need for ongoing maintenance of the information security program
• Describe recommended security management models
• Define a model for a full maintenance program
• Identify the key factors involved in monitoring the external and internal environment
• Describe how planning, risk assessment, vulnerability assessment, and remediation tie into information security maintenance
• Explain how to build readiness and review procedures into information security maintenance
• Discuss physical security controls