CISA Cert Prep: 5 Information Asset Protection for IS Auditors

3h 31mIntermediate2021-07-13

Authors

Michael Lester

CTO of WindTalker LLC

Human Element LLC

Founded as Logical Security by legendary security expert Shon Harris

Course details

Earning a CISA certification validates your ability to audit, control, and monitor information systems. Our test prep series tackles the exam one domain at a time, helping you acquire all the skills you need to confidently manage IT security audits. CISA Cert Prep: 5 covers the fifth domain: asset protection. This is a vital area of information security, which protects a company's data and intellectual property. Get an overview of information security basics, and then review the different types of security controls: authorization and authentication, network security, cryptography, PBX and VOIP security, wireless security, and more. Instructor Michael Lester wraps up with an overview of the different cyberattacks and countermeasures, and the attestation audits you can use to evaluate the effectiveness of your organization's policies, procedures, and controls.

Topics include:
Information security basics
Access control models
Network security
Cryptography
Secure protocols
Wireless security
Cyber attacks and countermeasures
Conducting SOC audients

Skills covered

Governance, Risk, and ComplianceCybersecurityCert Prep

Concepts

0. Introduction

01 - Welcome

1. Introduction to Information Security

02 - Information security concepts
03 - Anatomy of a cyberattack
04 - Social engineering
05 - Information security domains

2. Security Controls

06 - Data security
07 - Access control models
08 - Single sign-on
09 - Centralized access control
10 - Network security - Firewalls
11 - Authentication protocols
12 - VPNs and tunneling
13 - Domain names system
14 - Cryptography overview - Part 1
15 - Cryptography overview - Part 2
16 - Cryptography - Hash algorithms and digital signatures
17 - Cryptography - Public key infrastructure and certificates
18 - PBX and VOIP security
19 - Secure protocols
20 - Wireless security
21 - Internet of Things and endpoint security
22 - Third-party vendor controls
23 - Physical and environmental security
24 - Security assessment and testing
25 - Evidence collection and forensics

3. Attacks and Countermeasures

26 - Cyberattacks and countermeasures

4. Attestation Audits

27 - Conducting service organization control (SOC) audits

Conclusion

28 - Next steps