CIS 3035 - Introduction to Security

Clock Hours: 142

Delivery Mode
on-ground

Prerequisites: Information Processing Technician

Industry Certifications CompTIA Security+ and Testout Security Pro Certifications

Course Description:
The CompTIA Security+ and Testout Security Pro validate knowledge of communication security, infrastructure security, cryptography, operational security, and general security concepts. After completing this course, the student will be familiar with the fundamental concepts of information security. At the completion of the competencies, the student should be able to pass a nationally recognized certification.

Student Learning Outcomes:

Explain the security function and purpose of network devices and technologies.
Apply and implement secure network administration principles.
Distinguish and differentiate network design elements and compounds.
Implement and use common protocols.
Identify commonly used default network ports.
Implement wireless network in a secure manner.
Explain risk related concepts: control types, false positives, importance of policies in reducing risk, risk calculation, quantitative vs. qualitative, risk-avoidance, transference, acceptance, mitigation, deterrence, cloud computing and virtualization.
Carry out appropriate risk mitigation strategies.
Execute appropriate incident response procedures.
Explain the importance of security related awareness and training.
Compare and contrast aspects of business continuity.
Explain the impact and proper use of environmental controls.
Execute disaster recovery plans and procedures.
Analyze and differentiate among different types of malware.
Analyze and differentiate among types of attacks.
Analyze and differentiate among types of social engineering attacks.
Analyze and differentiate among types of wireless attacks.
Analyze and differentiate among types of application attacks.
Analyze and differentiate among types of mitigation and deterrent techniques.
Implement assessment tools and techniques to discover security threats and vulnerabilities.
Within the realm of vulnerability assessments, explain the proper use of penetration testing versus vulnerability scanning.
Explain the importance of application security.
Carry out appropriate procedures to establish host security.
Explain the importance of data security.
Explain the function and purpose of authentication services.
Explain the fundamental concepts and best practices related to authentication, authorization and access control.
Implement appropriate security controls when performing account management.
Summarize general cryptography concepts.
Use and apply appropriate cryptographic tools and products.
Explain the core concepts of public key infrastructure.
Implement PKI, certificate management and associated components.