Cyber Security Risk Assessment & Controls

Threat and Vulnerability Management

• Explain the importance of threat data and intelligence
• Utilize threat intelligence to support organizational security
• Perform vulnerability management activities
• Analyze the output from common vulnerability assessment tools
• Explain the threats and vulnerabilities associated with specialized technology
• Explain the threats and vulnerabilities associated with operating in the cloud
• Implement controls to mitigate attacks and software vulnerabilities

Threat and Vulnerability Management

• Explain the importance of threat data and intelligence
• Utilize threat intelligence to support organizational security
• Perform vulnerability management activities
• Analyze the output from common vulnerability assessment tools
• Explain the threats and vulnerabilities associated with specialized technology
• Explain the threats and vulnerabilities associated with operating in the cloud
• Implement controls to mitigate attacks and software vulnerabilities

Software and Systems Security

• Apply security solutions for infrastructure management
• Explain software assurance best practices
• Explain hardware assurance best practices

Security Operations and Monitoring

• Analyze data as part of security monitoring activities
• Implement configuration changes to existing controls to improve security
• Explain the importance of proactive threat hunting
• Compare and contrast automation concepts and technologies

Incident Response

• Explain the importance of the incident response process
• Apply the appropriate incident response procedure
• Analyze potential indicators of compromise
• Utilize basic digital forensics techniques

Compliance and Assessment

• Apply security concepts in support of organizational risk mitigation
• Explain the importance of frameworks, policies, procedures, and controls