Trainer gesucht
IT-Trainer Jobs und Stellenangebote: ISC2 SSCP - Systems Security Certified Practitioner, (ISC2), IT Security, IT-Security Spezialist.
Anmelden / Registrieren als Trainer
Agenda
Domain 1: Security Concepts and Practices
- Comply with code of ethics
- Understand security concepts
- Identify and implement security controls
- Document and maintain functional security controls
- Support and implement asset management lifecycle (i.e., hardware, software, and data)
- Support and/or implement change management lifecycle
- Support and/or implement security awareness and training (e.g., social engineering/phishing/tabletop exercises/awareness communications)
- Collaborate with physical security operations (e.g., data center/facility assessment, badging and visitor management, personal device restrictions)
Domain 2: Access Controls
- Implement and maintain authentication methods
- Understand and support internetwork trust architectures
- Support and/or implement the identity management lifecycle
- Understand and administer access controls
Domain 3: Risk Identification, Monitoring and Analysis
- Understand risk management
- Understand legal and regulatory concerns (e.g., jurisdiction, limitations, privacy)
- Perform security assessments and vulnerability management activities
- Operate and monitor security platforms (e.g., continuous monitoring)
- Analyze monitoring results
Domain 4: Incident Response and Recovery
- Understand and support incident response lifecycle (e.g., National Institute of Standards and Technology (NIST), International Organization for Standardization (ISO))
- Understand and support forensic investigations
- Understand and support business continuity plan (BCP) and disaster recovery plan (DRP)
Domain 5: Cryptography
- Understand reasons and requirements for cryptography
- Apply cryptography concepts
- Understand and implement secure protocols
- Understand public key infrastructure (PKI)
Domain 6: Network and Communication Security
- Understand and apply fundamental concepts of networking
- Understand network attacks (e.g., distributed denial of service (DDoS), man-in-the-middle (MITM), Domain Name System (DNS) cache poisoning)
- Manage network access controls
- Manage network security
- Operate and configure network-based security appliances and services
- Secure wireless communications
- Secure and monitor Internet of Things (IoT) (e.g., configuration, network isolation, firmware updates, End of Life (EOL) management)
Domain 7: Systems and Application Security
- Identify and analyze malicious code and activity
- Implement and operate endpoint device security
- Administer and manage mobile devices
- Understand and configure cloud security
- Operate and maintain secure virtual environments