SSCP Cert Prep: 2 Access Controls

Course details

The (ISC)2 Systems Security Certified Practitioner (SSCP) certification is an excellent entry point to a career in IT security. To help you prepare for the SSCP exam, instructor Mike Chapple has designed a series of courses covering each domain. In this installment, Mike covers the objectives of Access Controls, the second domain, which comprises 15% of the questions on the exam. Topics include identification, authorization, and authentication, including multifactor and mobile device authentication. Learn about the identity management lifecycle, and find out how to implement authentication mechanisms and access controls.

Concepts

0. Introduction

01 - Control access
02 - What you need to know
03 - Study resources

1. Identity and Access Management

04 - Access controls
05 - Identification, authentication, and authorization

2. Identification

06 - Usernames and access cards
07 - Biometrics
08 - Registration and identity proofing

3. Authentication

09 - Authentication factors
10 - Multifactor authentication
11 - Something you have
12 - Password authentication protocols
13 - SSO and federation
14 - Internetwork trust architectures
15 - Zero-trust network architectures
16 - SAML
17 - OAuth and OpenID Connect
18 - Device authentication

4. Identity Management Lifecycle

19 - Understand account and privilege management
20 - Account policies
21 - Password policies
22 - Manage roles
23 - Account monitoring
24 - Provisioning and deprovisioning

5. Authorization

25 - Understand authorization
26 - Mandatory access controls
27 - Discretionary access controls
28 - Access control lists
29 - Advanced authorization concepts

Conclusion

30 - Continuing your studies

SSCP Cert Prep: 2 Access Controls

Authors

Mike Chapple