Table of contents  (this product package has been updated on 17 May, 2011)

SECURITY THEORIES
THE COMPUTER SYSTEM ITSELF AS LARGELY AN UNTRUSTED SYSTEM
DEFENSE IN DEPTH
VULNERABILITIES
SECURITY MEASURES
STANDARDS AND GUIDELINES
THE SARBANES–OXLEY ACT AND THE COSO FRAMEWORK

INFORMATION SECURITY MANAGEMENT AND GOVERNANCE
IS MANAGEMENT ACTIVITIES
INFORMATION MANAGEMENT POLICY
ORGANIZATIONAL STRUCTURE AND SUPPORT
THE ROLE OF THE INFORMATION SECURITY MANAGER
IS CONTROL CLASSIFICATION
DEVISING YOUR OWN CLASSIFICATION SCHEME
ACCESS CONTROL MODELS
ACLS VERSUS CAPABILITIES
WHAT IS ORANGE BOOK, BY THE WAY?
TYPES OF ACCESS CONTROL
THE AAA CONCEPT
PRACTICAL ACCESS CONTROL MEASURES
ESTABLISHING ACCOUNTABILITY THROUGH EVENT LOGGING
IS GOVERNANCE GUIDANCE
BASIC OUTCOMES OF IS GOVERNANCE

IT STRATEGIC PLANNING

PROTECTION OF INFORMATION ASSETS THROUGH SECURITY POLICY
INFORMATION ASSETS DEFINED
DATA CLASSIFICATIONS AND LAYER OF RESPONSIBILITIES

SECURITY POLICY
SECURITY MODELS AND MODES OF OPERATIONS
EXAMPLE POLICY
EFFECTIVE SECURITY MANAGEMENT PRACTICES AND HR
OWNERSHIP & RESPONSIBILITY
CONSEQUENCES OF VIOLATIONS
EVALUATION
SECURITY AWARENESS TRAINING
CHANGE CONTROL

IS PROGRAM MANAGEMENT, PROJECT MANAGEMENT AND CHANGE MANAGEMENT
INFORMATION SECURITY PLAN
INFORMATION SECURITY BASELINES
GENERAL GUIDELINES
SYSTEM CHANGE CONTROL
SOFTWARE DEVELOPMENT PROCESSES AND MODELS

TECHNICAL READINGS

• SECTION 1: TOPICS ON SECURITY THEORY
• SECTION 2: TOPICS ON HACKING, ATTACKING, DEFENDING AND AUDITING
• SECTION 3: TOPICS ON ENCRYPTION AND VPN
• SECTION 4: TOPICS ON RESPONDING TO ATTACKS
• SECTION 5: TOPICS ON VIRUSES

The material presented in this guide also fits right into the May 2010 Exam Blueprint (Domain 06 INFORMATION SECURITY).

Covering:

Physical Security Design & Implementation
Risk assessments
Vulnerability analyses
Emergency planning techniques and communication techniques
Principles of management accounting and control
Business finance principles
Calculation & interpretation of return on investment
Knowledge of key concepts in the preparation and/or response to requests for proposals
Contract law

The material presented in this guide also fits right into the May 2010 Exam Blueprint (Domain 01 SECURITY PRINCIPLES AND PRACTICES Risk assessments, Domain 02 BUSINESS PRINCIPLES AND PRACTICES, and Domain 05 PHYSICAL SECURITY).

Table of contents

ASSETS PROTECTION PRINCIPLES & PLANNING
OVERVIEW
PLAN OBJECTIVES & ELEMENTS
VULNERABILITY & CRITICALITY ANALYSIS
OPERATIONAL TESTING
PLAN PERCEPTION
ILLUSORY TECHNIQUES
SECURITY PRODUCT STANDARDS
TYPES OF INCIDENT RESPONSE

PHYSICAL SECURITY & INSPECTION
FACILITY DESIGN
SPACE CONFIGURATION
SECURITY SURVEY
SECURITY INSPECTION

A LAYERED APPROACH TO SECURITY
PROTECTION IN DEPTH
PERIMETER DEFENSE
STANDOFF DISTANCE
PERIMETER ITEMS
OTHER CONCERNS

ENVIRONMENTAL DESIGN AND THE CONCEPT OF DEFENSIBLE SPACE
CPTED
THE CONCEPT OF DEFENSIBLE SPACE

SECURITY TECHNOLOGIES AND EQUIPMENT APPLICATIONS
CCTV
CAMERA
MONITOR
RECORDER
SWITCH
OTHER GUIDELINES
BUILDING OPENINGS 
DOORS 
WINDOWS 
VENTILATION AND UTILITY OPENINGS 
ELECTRICAL LOCKS 
GATES AND FENCING
CHAINLINK FENCING
CHAINLINK GATES
ANTICLIMB/ANTICUT FENCING
AESTHETICALLY PLEASING FENCE
FENCE TOPPING
FENCE MAINTENANCE
ELECTRONIC GATE OPENING
FENCE SIGNAGE
ENTRANCE SIGNAGE
FENCE MOUNTED SENSORS
INTRUSION DETECTION DEVICES
INFRARED SENSORS
MICROWAVE SENSORS
BISTATIC MICROWAVE SENSORS
DUAL TECHNOLOGY SENSORS
LINEAR BEAM SENSORS
GLASS BREAK SENSORS
NUISANCE ALARM VS FALSE ALARM
DOOR AND HATCH CONTACT ALARM SWITCHES
CARD READER SYSTEMS

GENERAL OPERATIONAL PRACTICES FOR SECURITY IMPROVEMENT
VISITOR CONTROL POLICY
ALARM RESPONSE POLICY
KEY CONTROL POLICY
ACCESS CONTROL POLICY
DELIVERY ACCESS CONTROL POLICY

HANDLING EMERGENCY
EMERGENCY MANAGEMENT
DIFFERENT APPROACHES
THE EMERGENCY RESPONSE TEAM
THE EMERGENCY COMMAND CENTER
DEALING WITH EXTERNAL AGENCIES
HAZARDOUS MATERIAL MANAGEMENT
BOMB THREAT HANDLING

CRISIS COMMUNICATION
THE CRISIS COMMUNICATION TEAM
WHAT TO DO AND WHAT NOT TO DO
EMERGENCY PUBLIC INFORMATION

RISK MANAGEMENT
RISK MANAGEMENT DEFINED
MITIGATION
RISK ANALYSIS VS RISK ASSESSMENT
RISK ANALYSIS TOOLS
STRATEGIC RISK ASSESSMENT
RAV
THE RISK ASSESSMENT FLOW
RISK COMMUNICATION
RISK VS THREAT AND VULNERABILITY
RISK CHARACTERIZATION
LOSS CALCULATIONS
THE RISK MANAGEMENT STEPS
RISK MANAGEMENT AND THE PROJECT MANAGER
BCP DEFINED
BCP VS BPCP VS DRP
BCP PHASES
BUSINESS IMPACT ANALYSIS DEFINED
BIA GOALS AND STEPS
RTO VS RPO
HOT SITE VS COLD SITE
MANAGING RECOVERY

MANAGING AN ORGANIZATION
OB MODELS AND THEORIES
HR POLICIES AND PRACTICES
EVALUATION, FEEDBACK AND REWARDS
RELEVANT THEORIES
WORKPLACE DEVIANCE
KNOWING HOW TO MANAGE AND MOTIVATE PEOPLE
DECISION THEORY
GILBRETH THEORY
COMPLEXITY THEORY
THEORIES OF LEADERSHIP
POSTMODERNISM MANAGEMENT VS CLASSICAL MANAGEMENT
CONTINGENCY MANAGEMENT THEORY
THE MAYO THEORY OF MANAGEMENT
THE BLANCHARD MANAGEMENT STYLE
MCGREGOR’S THEORY
THE LIKERT SCALE
PRODUCTIVITY ANALYSIS AND METHODS ANALYSIS
ORGANIZATIONAL DEVELOPMENT
CHANGE MANAGEMENT
CHANGE STRATEGIES

MANAGING PEOPLE (LEADERSHIP)
LEADERSHIP STYLES
GOVERNANCE
AGENCY THEORY
BUSINESS ETHICS
SOCIAL RESPONSIBILITY
 

COMMUNICATION & INFORMATION MANAGEMENT
THE ROLE AND APPROACHES OF INFORMATION MANAGEMENT
INTEGRATING INFORMATION AND BUSINESS STRATEGIES
COMMUNICATION MANAGEMENT
VERTICAL COMMUNICATION
HORIZONTAL COMMUNICATION
DIAGONAL COMMUNICATION
CIRCULAR COMMUNICATION
COMMUNICATION BARRIERS
FORMAL NETWORK VS GRAPEVINE
FORMAL COMMUNICATION VS INFORMAL COMMUNICATION
VERBAL VS NONVERBAL COMMUNICATION
NONVERBAL CLUES
THE NEGOTIATION PROCESS
STYLES OF NEGOTIATION

MANAGING BUSINESS CONTRACT
CONTRACT ADMINISTRATION OVERVIEW
CONTRACT CLOSEOUT
CONTRACT COMPENSATION AND FINANCING
QUOTATIONS AND TENDERS
RFP
LOI
DRAFTING YOUR CONTRACT
SETTING THE ORDER OF PRECEDENCE
CONTRACT EXHIBITS
TIME CLAUSE
REWARDS
INCORRECT PAYMENTS
LEGAL AUTHORITY
INSPECTION AND ACCEPTANCE
CHANGE ORDER PROCEDURES
EXPLICITLY SPELLED OUT REMEDIES
TERMINATION FOR DEFAULT/CAUSE
OTHER CLAUSES
ETHICS