Security Operations – Seventh CISSP Objective
13% of CISSP exam portion will be from Security Operation domain which covers a vast range of security topics and has further ten sub objectives.
- Ability to perform security investigations
- Able to gather evidence, perform digital forensics etc. Knowledge of law and regulations among operational, criminal and civil and the role of digital evidence in a legal discovery process
- Able to log and monitor digital activities, how to design, install and implement intrusion detection and preventions systems, event management, network monitoring etc.
- Provisioning of secure computing resources including hardware/software inventory, implement a configuration management system, securing cloud and virtual resources.
- In depth knowledge of Service Level Agreements (SLAs), Least Privilege, Separation of duties, shift rotations and the information life cycle is covered in fifth objective.
- Able to employ resource protection techniques, able to utilize protection techniques for software/hardware assets and media management.
- Management of incident detection, response, mitigation, reporting, recovery.
- Operating and maintaining preventative security controls like firewalls, IPS, IDS and third-party security services etc.
- Design and implement patch management systems, configuration management systems etc.
- Protecting information and assets and making them available 24/7, implementation of disaster recovery plans, business and continuity processes, physical and personnel security, etc.