https://madunix.wordpress.com/2017/07/28/cissp/

This guide is a supplement to your CISSP studies. Notes based on SYBEX/AIO/CBK.

Forensic:•Identification•Preservation•Collection•Examination•Analysis•Presentation•Decision==============================================================Forensic•Collection•Acquisition•Examination•Analysis•Reporting•Testifying•Archiving==============================================================Forensic:• Collection• Examination• Analysis• Reporting==============================================================Classification program: DIDD•define classification level•identify owner•determine security level•develop procedure to declassifying==============================================================Change Management: RAD – TIR• Request for a change to take place• Approval of the change• Documentation of the change• Tested and presented• Implementation• Report change to management==============================================================Data Classification Procedures•Define classification levels.•Specify the criteria that will determine how data are classified.•Identify data owners who will be responsible for classifying data.•Identify data custodian who will be responsible maintaining data and sec. level.•Indicate the security controls, protection mechanisms, required for each class level.•Document any exceptions to the previous classification issues.•Indicate the methods that can be used to transfer custody of info to diff owner.•Create a procedure to periodically review the classification and ownership.•Communicate any changes to the data custodian.•Indicate procedures for declassifying the data.•Integrate these issues into security-awareness program==============================================================BIA:•Identify Priorities•Identify Risk•Likelihood•Impact Assessment•Resource prioritization==============================================================BCP• Project Initiation• Business Impact Analysis• Recovery Strategy• Plan design and development• Implementation• Testing• Continual Maintenance==============================================================BCP NIST800-34• Develop planning policy;• BIA• Identify preventive controls• Create contingency strategies• Develop contingency plan• Test• Maintenance==============================================================BCP: bcp=psp+bia+cp+ai•Project Scope and Planning•Business Impact Assessment (BIA) – includes vulnerability assessment•Continuity Planning•Approval and Implementation==============================================================Damage assessment•Determining the cause•How long it will take•Identifying the resources•Declare a disaster==============================================================BCP1) Project scope and planning psp– Business Organization Analysis– BCP team selection– Resource Requirements– Legal Requirements2) Business impact assessment bia– Identify priorities– Risk Identification– Likelihood Assessment– Impact Assessment– Resource Priortization3) Continuity planning cp– Strategy Development– Provisions and Processes– Plan Approval– Plan Implementation– Training and Education4) Approval and implementation ai– Approval by senior management. (APPROVAL)– Creating an awareness of the plan enterprise-wide. (AWARENESS)– Maintenance of the plan, including updating when needed. (MAINTENANCE)– Implementation==============================================================Risk Analysis:•Analyzing environment for risks•Creating a cost/benefit report for safeguards•Evaluating threat==============================================================BIA:•Performing a risk analysis,•identifying critical systems,•determining criticality,•researching resource requirements==============================================================IRP: tic@•Triage (assesses the severity of the incident and verify)•investigation (contact law enforcement)•containment (limit the damage)•analysis•tracking==============================================================Change Management ICAA• Configuration Identification• Configuration Control• Configuration Status Accounting• Configuration Audit==============================================================Change Management RRASD• Request• Review• Approve• Schedule• Document