Security Management Programs and Oversight: Audits Flashcards by John Vargas | Brainscape

Q

Internal Audits?

A

Internal audits

Key elements to consider with respect to internal audits are:

Compliance

Audit committee

Self-assessments

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

External Audits?

A

External audits

Key elements to consider with respect to external audits are:

Regulatory.

Examinations.

Assessment.

Independent third-party audit.

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

CompTIA Security+ (SY0-701) (122 decks)

General Security Concepts: Examine Security Controls Category

General Security Concepts: Examine Security Control Types

General Security Concepts: Examine the Principle of Security

General Security Concepts: Examine Authentication Factors

General Security Concepts: Examine Authorization and Access control modules

General Security Concepts: Examining Authentication, Authorization and Accounting

General Security Concepts: Examining The Principle of Zero Trust

General Security Concepts: Examining Physical Security

General Security Concepts: Examining deception and disruption technology

General Security Concepts: Business Processes and Security Operations

General Security Concepts: Change Management Implications & Documentations

General Security Concepts: Examining Encryption Solutions

General Security Concepts: Examining Public Key Infrastructure

General Security Concepts: Examining Digital certificates

General Security Concepts: Examining Asymmetric Encryption

General Security Concepts: Examining Symmetric Encryption

General Security Concepts: Examining Hashing and Obfuscation

General Security Concepts: Quiz Revision

Threat, Vulnerabilities and Mitigations: Threat Actors

Threat, Vulnerabilities and Mitigations: Social Engineer

Threat, Vulnerabilities and Mitigations: Business Email Compromise

Threat, Vulnerabilities and Mitigations: Digital System Threats

Threat, Vulnerabilities and Mitigations: Network Based Threats

Threat, Vulnerabilities and Mitigations: Removable Media Threats

Threat, Vulnerabilities and Mitigations: Supply Chain Attack

Threat, Vulnerabilities and Mitigations: Application Vulnerabilities

Threat, Vulnerabilities and Mitigations: Operating System Vulnerabilities

Threat, Vulnerabilities and Mitigations: Web-Based Vulnerabilities

Threat, Vulnerabilities and Mitigations: Hardware Vulnerabilities

Threat, Vulnerabilities and Mitigations: Cloud Vulnerabilities

Threat, Vulnerabilities and Mitigations: Virtualization Vulnerabilities

Threat, Vulnerabilities and Mitigations: Cryptographic Vulnerabilities

Threat, Vulnerabilities and Mitigations: Mobile Device Vulnerabilities

Threat, Vulnerabilities and Mitigations: Zero Day Vulnerabilities

Threat, Vulnerabilities and Mitigations: Indicators of Malware Attacks

Threat, Vulnerabilities and Mitigations: Indicators of Physical Attacks

Threat, Vulnerabilities and Mitigations: Indicators of Network Attacks

Threat, Vulnerabilities and Mitigations: Indicators of Application attack

Threat, Vulnerabilities and Mitigations: Indicators of Cryptographic Attacks

Threat, Vulnerabilities and Mitigations: Indicators of Password Attacks

Threat, Vulnerabilities and Mitigations: Cybersecurity Mitigation Techniques

Threat, Vulnerabilities and Mitigations: Quiz Revision

Security Architecture: Cloud-Related Concepts

Security Architecture: Network Infrastructure concepts

Security Architecture: Virtualization Concept

Security Architecture: IoT and SCADA

Security Architecture: Architectural Model Considerations

Security Architecture: Security Infrastructure Considerations

Security Architecture: Network Appliances

Security Architecture: Port Security

Security Architecture: Firewalls

Security Architecture: Secure Communication and Access

Security Architecture: Selecting Effective Controls

Security Architecture: Data Types

Security Architecture: Data Classification

Security Architecture: Data Considerations

Security Architecture: Methods of Securing Data

Security Architecture: HA and Site Considerations

Security Architecture: Platform Diversity and Multi-Cloud Systems

Security Architecture: Continuity of Operations and Capacity Planning

Security Architecture: Testing

Security Architecture: Backups

Security Architecture: Power

Security Architecture: Quiz Revision

Security Operations: Examining Baselines

Security Operations: Examining security for mobile devices

Security Operations: Examining Wireless Security

Security Operations: Examining Application Security

Security Operations: Examining Asset Management

Security Operations: Identifying Vulnerabilities

Security Operations: Examining Vulnerability Analysis

Security Operations: Vulnerability response, Remediation and Reporting

Security Operations: Examining Security monitoring and alerting

Security Operations: Examining Firewalls and intrusion detection devices

Security Operations Examining Web Filtering

Security Operations: Examine Email Security

Security Operations: Examining Endpoint Detection

Security Operations: Examining Secure network protection

Security Operations: Examining Operating Systems

Security Operations: Examining Password Security

Security Operations: Examining Single Sign-On

Security Operations: Examining user onboarding and Offboarding

Security Operations: Examining Identity and Access management

Security Operations: Examining Privileged Identity Management

Security Operations: Examining automation and scripting uses

Security Operations: Examining the incident response process and activities

Security Operations: Examine Digital-forensics Activities

Security Operations: Examining investigations data sources and log data

Security Operations - Quiz Revision

Security Management Programs and Oversight: Guide Line and Policies

Security Management Programs and Oversight: Standard and Procedures

Security Programs and Oversight: External Considerations and Revisions

Security Programs Management and Oversight: Governance Strucutres

Security Management Programs and Oversight: Roles and Responsibilities

Security Management Programs and Oversight: Risk Identification and Risk Assessment

Security Management Programs and Oversight: Risk Analysis

Security Management Programs and Oversight: Risk Register, Tolerance and Appetite

Security Management Programs and Oversight: Risk Management Strategies

Security Management Program and Oversight: Risk Reporting and BIA

Security Management Programs and Oversight: Vendor Assessment and selection

Security Management Programs and Oversight: Agreement Types

Security Management Programs and Oversight: Additional Vendor Considerations

Security Management Programs and Oversight: Compliance

Security Management Programs and Oversight: Compliance Monitoring

Security Management Programs and Oversight: Privacy Consideration

Security Management Programs and Oversight: Attestation

Security Management Programs and Oversight: Audits

Security Management Programs and Oversight: Pen Testing

Security Management Programs and Oversight: Phishing

Security Management Programs and Oversight: Anomalous Behaviour Recognition

Security Management Programs and Oversight: User Guidance and Training

Security Management Programs and Oversight: Reporting and Monitoring

Security Management Programs and Oversight: Development and Execution

Security Management Programs and Oversight Quiz

CompTIA Security+ (SY0-701) Practice Exam 1 Revision

CompTIA Security+ (SY0-701) Exam 2 Revision

CompTIA Security+ (SY0-701) Exam 3 Revision

CompTIA Security+ (SY0-701) Exam 4

CompTIA Security+ (SY0-701) Exam 5 Revision

CompTIA Security+ (SY0-701) Exam 6

Professor Messer - Security+ SY0-701: Exam A

Professor Messer - Security+ SY0-701: Exam B