Understand and apply fundamental concepts and methods related to the fields of information technology and security.

Align overall organizational operational goals with security functions and implementations.

Understand how to protect assets of the organization as they go through their lifecycle.

Understand the concepts, principles, structures, and standards used to design, implement, monitor, and secure operating systems, equipment, networks, applications, and those controls used to enforce various levels of confidentiality, integrity, and availability.

Implement system security through the application of security design principals and the application of appropriate security control mitigations for vulnerabilities present in common information system types and architectures.

Understand the importance of cryptography and the security services it can provide in today’s digital and information age.

Understand the impact of physical security elements on information system security and apply secure design principals to evaluate or recommend appropriate physical security protections.

Understand the elements that comprise communication and network security coupled with a thorough description of how the communication and network systems function.

List the concepts and architecture that define the associated technology and implementation systems and protocols at Open Systems Interconnection (OSI) model layers 1–7.

Identify standard terms for applying physical and logical access controls to environments related to their security practice.

Appraise various access control models to meet business security requirements.

Name primary methods for designing and validating test and audit strategies that support business requirements.

Enhance and optimize an organization’s operational function and capacity by applying and utilizing appropriate security controls and countermeasures.

Recognize risks to an organization’s operational endeavors, and assess specific threats, vulnerabilities, and controls.

Understand the System Lifecycle (SLC) and the Software Development Lifecycle (SDLC) and how to apply security to it, and identify which security control(s) are appropriate for the development environment, and assess the effectiveness of software security.

Understand legal frameworks and guidelines that affect cloud services.

Recognize the fundamentals of data privacy regulatory/legislative mandates

Assess risks, vulnerability, threats, and attacks in the cloud environment.

Evaluate the design and plan for cloud infrastructure security controls.

Evaluate what is necessary to manage security operations.

Understand what operational controls and standards to implement.

Describe the types of cloud deployment models in the types of “as a service” cloud models currently available today.

Identify key terminology, and associated definitions related to cloud technology. Be able to establish a common terminology for use with in your team or workgroup.

Build a business case for cloud adoption and be able to determine with business units the benefits of the cloud and cloud migration strategies.

Describe security and the alignment of asset management to risk management.

Appraise risk management options and the use of access controls to protect assets.

Examine the field of cryptography to secure information and communication.

Build a security posture by securing software, data, and endpoints.

Apply network and communications security to establish a secure networked environment.

Evaluate cloud and wireless security.

Prepare for incident detection and response.

Implement appropriate measures that contribute to the maturation of risk management.

Understand and apply fundamental concepts and methods related to the fields of information technology and security.

Align overall organizational operational goals with security functions and implementations.

Understand how to protect assets of the organization as they go through their lifecycle.

Understand the concepts, principles, structures, and standards used to design, implement, monitor, and secure operating systems, equipment, networks, applications, and those controls used to enforce various levels of confidentiality, integrity, and availability.

Implement system security through the application of security design principals and the application of appropriate security control mitigations for vulnerabilities present in common information system types and architectures.

Understand the importance of cryptography and the security services it can provide in today’s digital and information age.

Understand the impact of physical security elements on information system security and apply secure design principals to evaluate or recommend appropriate physical security protections.

Understand the elements that comprise communication and network security coupled with a thorough description of how the communication and network systems function.

List the concepts and architecture that define the associated technology and implementation systems and protocols at Open Systems Interconnection (OSI) model layers 1–7.

Identify standard terms for applying physical and logical access controls to environments related to their security practice.

Appraise various access control models to meet business security requirements.

Name primary methods for designing and validating test and audit strategies that support business requirements.

Enhance and optimize an organization’s operational function and capacity by applying and utilizing appropriate security controls and countermeasures.

Recognize risks to an organization’s operational endeavors, and assess specific threats, vulnerabilities, and controls.

Understand the System Lifecycle (SLC) and the Software Development Lifecycle (SDLC) and how to apply security to it, and identify which security control(s) are appropriate for the development environment, and assess the effectiveness of software security.

Understand legal frameworks and guidelines that affect cloud services.

Recognize the fundamentals of data privacy regulatory/legislative mandates

Assess risks, vulnerability, threats, and attacks in the cloud environment.

Evaluate the design and plan for cloud infrastructure security controls.

Evaluate what is necessary to manage security operations.

Understand what operational controls and standards to implement.

Describe the types of cloud deployment models in the types of “as a service” cloud models currently available today.

Identify key terminology, and associated definitions related to cloud technology. Be able to establish a common terminology for use with in your team or workgroup.

Build a business case for cloud adoption and be able to determine with business units the benefits of the cloud and cloud migration strategies.

Describe security and the alignment of asset management to risk management.

Appraise risk management options and the use of access controls to protect assets.

Examine the field of cryptography to secure information and communication.

Build a security posture by securing software, data, and endpoints.

Apply network and communications security to establish a secure networked environment.

Evaluate cloud and wireless security.

Prepare for incident detection and response.

Implement appropriate measures that contribute to the maturation of risk management.