CHAPTER 9 Information Security and Risk Management

The Security Management domain tests your knowledge of the items related to the triad of security: confidentiality, integrity, and availability. A large portion of this domain deals with risk management. There are many ways to manage risk, such as developing security plans and procedures, implementing service level agreements, and performing security assessments. Each of these items plays a role in managing the security of the organization’s employees and assets. The following list gives you some key areas from Security Management you need to be aware of for the CISSP exam:

Image   CIA (confidentiality, ...

Get CISSP Practice Questions Exam Cram, Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.