Curriculum For This Course
Video tutorials list
-
Introduction
Video Name Time 1. Exam Information 5:31 2. Exam Topics 3:28 -
Chapter 1: Information Security Fundamentals
Video Name Time 1. Chapter 1 Overview 0:45 2. Information Assets 3:38 3. What is Information Security? 3:28 4. The CIA Triad 3:31 5. Authenticity and Non-repudiation 5:23 6. Chapter 1 Summary 1:00 -
Chapter 2: ISO/IEC 27001:2022
Video Name Time 1. Chapter 2 Overview 0:58 2. Management Systems 9:06 3. Information Security Management Systems (ISMS) 4:07 4. International Standards 4:05 5. ISO 27000 Family of Standards 7:15 6. ISO/IEC 27001 Overview 5:57 7. History of ISO/IEC 27001 2:28 8. Other Frameworks worth knowing 8:32 9. Chapter 2 Summary 1:17 -
Chapter 3: Implementation Project
Video Name Time 1. Chapter 3 Overview 0:47 2. Normative Requirements 3:39 3. Clause 7.5: Documented Information 10:57 4. Project Deliverables 2:51 5. Project Plan 6:57 6. Chapter 3 Summary 2:20 -
Step 1: Scope of the ISMS
Video Name Time 1. Step 1 Overview 3:24 2. Context Analysis Process 2:40 3. Clause 4.1: Understanding the organization and its context 8:51 4. Clause 4.2: Understanding the needs and expectations of interested parties 6:57 5. Control A.5.31: Legal, statutory, regulatory and contractual requirements 4:57 6. Clause 4.3: Determining the scope of the ISMS 5:24 7. Clause 4.4: Information Security Management System 5:58 8. Step 1 Summary 1:44 -
Step 2: Gap Analysis
Video Name Time 1. Step 2 Overview 3:31 -
Step 3: Management Support
Video Name Time 1. Step 3 Overview 6:39 2. Business Case 5:10 3. Clause 5.1: Leadership and Commitment 5:18 4. Clause 5.3: Organisational Roles, Responsibilities and Authorities 8:34 5. Information Security Governance Process 5:10 6. Step 3 Summary 2:35 -
Step 4: Information Security Policy
Video Name Time 1. Step 4 Overview 2:25 2. Clause 6.2: Information Security objectives 10:34 3. Clause 5.2: Policy 6:31 4. Policy Management Process 3:33 5. 7.4 Communication 3:31 6. Communication Process 3:57 7. Step 4 Summary 3:12 -
Step 5: Competence Assurance
Video Name Time 1. Step 5 Overview 3:10 2. Clause 7.2: Competence 7:46 3. Clause 7.3: Awareness 3:54 4. Control A.6.3: Information security awareness and training 6:29 5. Security Awareness and Training Process 3:23 6. Step 5 Summary 2:28 -
Step 6: Inventory of Assets
Video Name Time 1. Step 6 Overview 2:36 2. Control A.5.9: Inventory of information and other associated assets 5:52 3. Control A.5.12: Classification of information 4:16 4. Control A.5.13: Labelling of information 4:02 5. Step 6 Summary 1:48 -
Step 7: Risk Management Methodology
Video Name Time 1. Step 7 Overview 4:35 2. Risk Management Fundamentals 6:30 3. Risk Management Process 4:11 4. Clause 6.1.1: General 3:35 5. Clause 6.1.2: Information Security Risk Assessment 15:22 6. Risk Assessment Process 3:25 7. Clause 6.1.3: Information Security Risk Treatment 15:12 8. Risk Treatment Process 5:07 9. Step 7 Summary 1:45 -
Step 8: Informantion Security Risk Assessment
Video Name Time 1. Step 8 Overview 2:33 2. Clause 8.2: Information Security Risk Assessment 2:25 3. Threats 2:29 4. Vulnerabilities 1:32 5. Step 8 Summary 1:22 -
Step 9: Information Security Risk Treatment
Video Name Time 1. Step 9 Overview 5:14 2. 7.1 Resources 6:04 3. Resource Management Process 3:06 4. Security Controls 3:57 5. Annex A Overview 6:01 6. Clause 8.3: Information Security Risk Treatment 6:01 7. Records Control Process 2:33 8. Step 9 Summary 2:50 -
Step 10: Performance Evaluation
Video Name Time 1. Step 10 Overview 2:29 2. Clause 9.1: Monitoring, Measurement , Analysis and Evaluation 4:08 3. Performance Evaluation Process 2:13 4. Clause 9.2: Internal Audit 5:10 5. Internal Audit Process 3:57 6. Clause 9.3: Management Review 8:17 7. Management R 2:38 -
Step 11: Improvement
Video Name Time 1. Step 11 Overview 2:50 2. Clause 10.1: Continual Improvement 5:07 3. Clause 10.2: Nonconformity and corrective action 7:37 4. ISMS Improvement Process 1:55 5. ISMS Change Management Process 3:08 -
Step 12: Certification Audit
Video Name Time 1. Step 12 Overview 2:22 2. Certification Process 4:57 3. Step 12 Summary 0:58 -
Annex A: 5. Organizational Controls
Video Name Time 1. Annex A.5 Overview 2:38 2. A.5.1 Policies for information security 2:46 3. A.5.2 Information security roles and responsibilities 1:33 4. A.5.3 Segregation of duties 1:18 5. A.5.4 Management responsibilities 1:38 6. A.5.5 Contact with authorities 1:20 7. A.5.6 Contact with special interest groups 1:27 8. A.5.7 Threat intelligence 2:15 9. A.5.8 Information security in project management 2:07 10. A.5.9 Inventory of information and other associated assets 5:54 11. A.5.10 Acceptable use of information and other associated assets 1:21 12. A.5.11 Return of assets 1:33 13. A.5.12 Classification of information 5:14 14. A.5.13 Labelling of information 4:06 15. A.5.14 Information transfer 2:24 16. A.5.15 Access control 1:38 17. A.5.16 Identity management 1:02 18. A.5.17 Authentication information 1:32 19. A.5.18 Access rights 0:57 20. Supplier Management Process 2:39 21. A.5.19 Information security in supplier relationships 2:10 22. A.5.20 Addressing information security within supplier agreements 1:51 23. A.5.21 Managing information security in the information and communication techno 1:05 24. A.5.22 Monitoring, review and change management of supplier services 1:22 25. A.5.23 Information security for use of cloud services 1:50 26. Information Security Incident Management Process 3:02 27. A.5.24 Information security incident management planning and preparation 1:34 28. A.5.25 Assessment and decision on information security events 0:51 29. A.5.26 Response to information security incidents 1:21 30. A.5.27 Learning from information security incidents 1:08 31. A.5.28 Collection of evidence 1:09 32. A.5.29 Information security during disruption 0:49 33. A.5.30 ICT readiness for business continuity 1:52 34. A.5.31 Legal, statutory, regulatory and contractual requirements 4:55 35. A.5.32 Intellectual property rights 1:25 36. A.5.33 Protection of records 1:54 37. A.5.34 Privacy and protection of personal identifiable information (PII) 1:00 38. A.5.35 Independent review of information security 1:09 39. A.5.36 Compliance with policies, rules and standards for information security 1:06 40. A.5.37 Documented operating procedures 0:52 -
Annex A: 6. People Controls
Video Name Time 1. Annex A.6 Overview 3:00 2. A.6.1 Screening 7:13 3. A.6.2 Terms and conditions of employment 4:16 4. A.6.3 Information security awareness, education and training 6:29 5. A.6.4 Disciplinary process 4:08 6. A.6.5 Responsibilities after termination or change of employment 4:46 7. A.6.6 Confidentiality or non-disclosure agreements 4:34 8. A.6.7 Remote working 5:31 9. A.6.8 Information security event reporting 4:22 -
Annex A A:7. Physical Controls
Video Name Time 1. Annex A.7 Overview 2:55 2. A.7.1 Physical security perimeters 8:49 3. A.7.2 Physical entry 6:18 4. A.7.3 Securing offices, rooms and facilities 4:12 5. A.7.4 Physical security monitoring 4:08 6. A.7.5 Protecting against physical and environmental threats 3:53 7. A.7.6 Working in secure areas 3:02 8. A.7.7 Clear desk and clear screen 6:31 9. A.7.8 Equipment siting and protection 4:42 10. A.7.9 Security of assets off-premises 5:42 11. A.7.10 Storage media 6:06 12. A.7.11 Supporting utilities 5:27 13. A.7.12 Cabling security 5:47 14. A.7.13 Equipment maintenance 4:34 15. A.7.14 Secure disposal or re-use of equipment 3:29 -
Annex A: 8. Technological Controls
Video Name Time 1. Annex A.8 Overview 2:11 2. A.8.1 User end point devices 1:42 3. A.8.2 Privileged access rights 2:07 4. A.8.3 Information access restriction 1:52 5. A.8.4 Access to source code 1:55 6. A.8.5 Secure authentication 2:34 7. A.8.6 Capacity management 2:47 8. A.8.7 Protection against malware 2:28 9. A.8.8 Management of technical vulnerabilities 2:04 10. A.8.9 Configuration management 2:32 11. A.8.10 Information deletion 3:01 12. A.8.11 Data masking 2:05 13. A.8.12 Data leakage prevention 2:01 14. A.8.13 Information backup 2:17 15. A.8.14 Redundancy of information processing facilities 2:03 16. A.8.15 Logging 2:38 17. A.8.16 Monitoring activities 2:26 18. A.8.17 Clock synchronization 1:42 19. A.8.18 Use of privileged utility programs 1:36 20. A.8.19 Installation of software on operational systems 2:22 21. A.8.20 Networks security 2:03 22. A.8.21 Security of network services 1:35 23. A.8.22 Segregation of networks 2:16 24. A.8.23 Web filtering 1:37 25. A.8.24 Use of cryptography 2:09 26. A.8.25 Secure development life cycle 1:37 27. A.8.26 Application security requirements 1:58 28. A.8.27 Secure system architecture and engineering principles 3:07 29. A.8.28 Secure coding 2:58 30. A.8.29 Security testing in development and acceptance 1:47 31. A.8.30 Outsourced development 1:53 32. A.8.31 Separation of development, test and production environments 2:06 33. A.8.32 Change management 1:42 34. A.8.33 Test information 1:19 35. A.8.34 Protection of information systems during audit testing 1:24 -
Practice Exam
Video Name Time 1. How to maintain your TRECCERT certification 3:08
Add Comment