1
Q
Internal Audits?
A
Internal audits
Key elements to consider with respect to internal audits are:
Compliance
Audit committee
Self-assessments
2
Q
External Audits?
A
External audits
Key elements to consider with respect to external audits are:
Regulatory.
Examinations.
Assessment.
Independent third-party audit.
CompTIA Security+ (SY0-701)
flashcards
Decks in class (122)
# Cards
-
General Security Concepts: Examine Security Controls Category5
-
General Security Concepts: Examine Security Control Types14
-
General Security Concepts: Examine the Principle of Security12
-
General Security Concepts: Examine Authentication Factors6
-
General Security Concepts: Examine Authorization and Access control modules5
-
General Security Concepts: Examining Authentication, Authorization and Accounting8
-
General Security Concepts: Examining The Principle of Zero Trust6
-
General Security Concepts: Examining Physical Security10
-
General Security Concepts: Examining deception and disruption technology5
-
General Security Concepts: Business Processes and Security Operations10
-
General Security Concepts: Change Management Implications & Documentations9
-
General Security Concepts: Examining Encryption Solutions14
-
General Security Concepts: Examining Public Key Infrastructure11
-
General Security Concepts: Examining Digital certificates12
-
General Security Concepts: Examining Asymmetric Encryption9
-
General Security Concepts: Examining Symmetric Encryption12
-
General Security Concepts: Examining Hashing and Obfuscation19
-
General Security Concepts: Quiz Revision97
-
Threat, Vulnerabilities and Mitigations: Threat Actors14
-
Threat, Vulnerabilities and Mitigations: Social Engineer8
-
Threat, Vulnerabilities and Mitigations: Business Email Compromise7
-
Threat, Vulnerabilities and Mitigations: Digital System Threats4
-
Threat, Vulnerabilities and Mitigations: Network Based Threats5
-
Threat, Vulnerabilities and Mitigations: Removable Media Threats5
-
Threat, Vulnerabilities and Mitigations: Supply Chain Attack1
-
Threat, Vulnerabilities and Mitigations: Application Vulnerabilities5
-
Threat, Vulnerabilities and Mitigations: Operating System Vulnerabilities5
-
Threat, Vulnerabilities and Mitigations: Web-Based Vulnerabilities6
-
Threat, Vulnerabilities and Mitigations: Hardware Vulnerabilities10
-
Threat, Vulnerabilities and Mitigations: Cloud Vulnerabilities2
-
Threat, Vulnerabilities and Mitigations: Virtualization Vulnerabilities4
-
Threat, Vulnerabilities and Mitigations: Cryptographic Vulnerabilities4
-
Threat, Vulnerabilities and Mitigations: Mobile Device Vulnerabilities7
-
Threat, Vulnerabilities and Mitigations: Zero Day Vulnerabilities1
-
Threat, Vulnerabilities and Mitigations: Indicators of Malware Attacks10
-
Threat, Vulnerabilities and Mitigations: Indicators of Physical Attacks4
-
Threat, Vulnerabilities and Mitigations: Indicators of Network Attacks8
-
Threat, Vulnerabilities and Mitigations: Indicators of Application attack5
-
Threat, Vulnerabilities and Mitigations: Indicators of Cryptographic Attacks3
-
Threat, Vulnerabilities and Mitigations: Indicators of Password Attacks5
-
Threat, Vulnerabilities and Mitigations: Cybersecurity Mitigation Techniques0
-
Threat, Vulnerabilities and Mitigations: Quiz Revision177
-
Security Architecture: Cloud-Related Concepts12
-
Security Architecture: Network Infrastructure concepts6
-
Security Architecture: Virtualization Concept5
-
Security Architecture: IoT and SCADA6
-
Security Architecture: Architectural Model Considerations12
-
Security Architecture: Security Infrastructure Considerations6
-
Security Architecture: Network Appliances6
-
Security Architecture: Port Security4
-
Security Architecture: Firewalls5
-
Security Architecture: Secure Communication and Access6
-
Security Architecture: Selecting Effective Controls4
-
Security Architecture: Data Types7
-
Security Architecture: Data Classification8
-
Security Architecture: Data Considerations6
-
Security Architecture: Methods of Securing Data8
-
Security Architecture: HA and Site Considerations7
-
Security Architecture: Platform Diversity and Multi-Cloud Systems6
-
Security Architecture: Continuity of Operations and Capacity Planning9
-
Security Architecture: Testing5
-
Security Architecture: Backups8
-
Security Architecture: Power3
-
Security Architecture: Quiz Revision144
-
Security Operations: Examining Baselines13
-
Security Operations: Examining security for mobile devices9
-
Security Operations: Examining Wireless Security6
-
Security Operations: Examining Application Security7
-
Security Operations: Examining Asset Management11
-
Security Operations: Identifying Vulnerabilities12
-
Security Operations: Examining Vulnerability Analysis4
-
Security Operations: Vulnerability response, Remediation and Reporting6
-
Security Operations: Examining Security monitoring and alerting17
-
Security Operations: Examining Firewalls and intrusion detection devices5
-
Security Operations Examining Web Filtering9
-
Security Operations: Examine Email Security6
-
Security Operations: Examining Endpoint Detection4
-
Security Operations: Examining Secure network protection4
-
Security Operations: Examining Operating Systems7
-
Security Operations: Examining Password Security6
-
Security Operations: Examining Single Sign-On10
-
Security Operations: Examining user onboarding and Offboarding5
-
Security Operations: Examining Identity and Access management4
-
Security Operations: Examining Privileged Identity Management0
-
Security Operations: Examining automation and scripting uses6
-
Security Operations: Examining the incident response process and activities9
-
Security Operations: Examine Digital-forensics Activities7
-
Security Operations: Examining investigations data sources and log data13
-
Security Operations - Quiz Revision164
-
Security Management Programs and Oversight: Guide Line and Policies7
-
Security Management Programs and Oversight: Standard and Procedures2
-
Security Programs and Oversight: External Considerations and Revisions2
-
Security Programs Management and Oversight: Governance Strucutres4
-
Security Management Programs and Oversight: Roles and Responsibilities5
-
Security Management Programs and Oversight: Risk Identification and Risk Assessment2
-
Security Management Programs and Oversight: Risk Analysis8
-
Security Management Programs and Oversight: Risk Register, Tolerance and Appetite6
-
Security Management Programs and Oversight: Risk Management Strategies1
-
Security Management Program and Oversight: Risk Reporting and BIA5
-
Security Management Programs and Oversight: Vendor Assessment and selection7
-
Security Management Programs and Oversight: Agreement Types8
-
Security Management Programs and Oversight: Additional Vendor Considerations3
-
Security Management Programs and Oversight: Compliance7
-
Security Management Programs and Oversight: Compliance Monitoring4
-
Security Management Programs and Oversight: Privacy Consideration6
-
Security Management Programs and Oversight: Attestation10
-
Security Management Programs and Oversight: Audits2
-
Security Management Programs and Oversight: Pen Testing6
-
Security Management Programs and Oversight: Phishing3
-
Security Management Programs and Oversight: Anomalous Behaviour Recognition3
-
Security Management Programs and Oversight: User Guidance and Training8
-
Security Management Programs and Oversight: Reporting and Monitoring2
-
Security Management Programs and Oversight: Development and Execution1
-
Security Management Programs and Oversight Quiz107
-
CompTIA Security+ (SY0-701) Practice Exam 1 Revision31
-
CompTIA Security+ (SY0-701) Exam 2 Revision18
-
CompTIA Security+ (SY0-701) Exam 3 Revision21
-
CompTIA Security+ (SY0-701) Exam 419
-
CompTIA Security+ (SY0-701) Exam 5 Revision21
-
CompTIA Security+ (SY0-701) Exam 625
-
Professor Messer - Security+ SY0-701: Exam A22
-
Professor Messer - Security+ SY0-701: Exam B71
