jueves, 23 de agosto de 2012

Physical Security Considerations

Many companies are merging physical security and IT security departments and functions. This makes a lot of sense given that the line between the two is not at all clear. For example, if a user swipes a badge, then a server unlocks a door, that’s a blend of physical security and IT technology. If that door leads to the computer room or even a wiring closet, then it is IT security, too.  In this domain, both sides will be considered.

martes, 21 de agosto de 2012

Law, Investigation, Forensics and Ethics

One of the most difficult and challenging parts of a security manager’s job responsibility can be the handling of incidents and investigations. Let's dive into this domain to discuss the steps an ISSMP must take to prepare for, detect, react to, correct, report, and learn from every incident that does occur.

Technology Related Business Continuity Planning (BCP) and Disaster Recovery Planning (DRP)

The relationship between BCP and DRP is often misunderstood, and even worse, sometimes used interchangeably. A BCP is an examination of a business. It is done once. A DRP is created for every likely or feasible scenario, so that when the bad event happens, a plan will exist for dealing with it. The relationship is one BCP to many DRPs. Now let's dive into this deeper in this video.

jueves, 9 de agosto de 2012

CISSP-ISSMP: Understand Business Continuity Planning (BCP) and Disaster Recovery Planning (DRP)

Organizations need to prepare for the risk of an interruption to services or operations and put in place plans that will help prevent such failures, minimize the impact if an incident were to happen and manage the recovery to normal operations as quickly as possible. Let's discuss in this domain. 


jueves, 2 de agosto de 2012

CISSP-ISSEP: Administración Técnica

Este dominio Incluye el procedo de adquisición del DoD (Department of Defense).


Si tienes problemas para ver el video click here

CISSP-ISSMP: Security Compliance Management

Este webcast trata sobre regulaciones y cumplimiento, así como de Auditorias y standares.

miércoles, 1 de agosto de 2012

CISSP-ISSAP: Criptografía

Explica los diferentes tipos de algoritmos criptograficos que existen y proporciona un resumen de las ventajas y desventajas de cada uno.