Concepts and Best Practices

Define operations security concepts and describe operations security best practices.

  • Explain antivirus controls and provisions for secure email.

  • Explain the purpose of data backup.

  • Detail how sensitive information and media should be handled.

  • Describe how media should be handled.

Throughout this chapter many security principles have been discussed. Information has been provided on how the practices of least privilege, separation of duties, and change management can improve security and reduce the risk of fraud and accidental loss of data or data integrity. However, many other operations best practices contribute to the stability and security of information. Some of them are discussed in other domains. Legal issues, for ...

Get CISSP Training Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.