SearchSecurity

Topics Covered

• Data security technology and strategy (5) +

  • Data loss prevention technology
  • Data security and cloud computing
  • Data security breaches
  • Data security strategies and governance
  • Disk and file encryption tools

• Enterprise identity and access management (8) +

  • Active Directory security
  • Biometric technology
  • Password management and policy
  • PKI and digital certificates
  • Privileged access management
  • Single-sign on (SSO) and federated identity
  • Two-factor and multifactor authentication strategies
  • Web authentication and access control

• Enterprise network security (9) +

  • DDoS attack detection and prevention
  • Endpoint protection and client security
  • IoT security issues
  • IPv6 security and network protocols security
  • Network Access Control technologies
  • Network device security: Appliances, firewalls and switches
  • Secure remote access
  • Software-defined security best practices
  • VPN security

• Information security certifications, training and jobs (2) +

  • CISSP certification
  • Security industry certifications

• Information security program management (7) +

  • Government information security management
  • Information security incident response
  • Information security laws, investigations and ethics
  • Information security policies, procedures and guidelines
  • Security automation systems, tools and tactics
  • Security industry market trends, predictions and forecasts
  • Security vendor mergers and acquisitions

• Information security risk management (3) +

  • Penetration testing, ethical hacking and vulnerability assessments
  • Risk assessments, metrics and frameworks
  • Security awareness training and insider threats

• Information security threats (5) +

  • Cyberespionage and nation-state cyberattacks
  • Email and messaging threats
  • Emerging cyberattacks and threats
  • Hacker tools and techniques: Underground hacking sites
  • Malware, virus, Trojan and spyware protection and removal

• Network threat detection (4) +

  • Network intrusion detection and prevention (IDS-IPS)
  • Real-time network monitoring and forensics
  • SIEM, log management and big data security analytics
  • Threat intelligence sharing and services

• Platform security (3) +

  • Alternative operating system security
  • Microsoft Windows security
  • Virtualization security issues and threats

• Security audit, compliance and standards (4) +

  • Data privacy issues and compliance
  • HIPAA
  • IT security audits and audit frameworks
  • PCI Data Security Standard

• Software and application security (9) +

  • Application attacks (buffer overflows, cross-site scripting)
  • Application firewall security
  • Database security
  • Microsoft Patch Tuesday and patch management
  • Open source security tools and software
  • Productivity apps and messaging security
  • Secure SaaS: Cloud application security
  • Secure software development
  • Social media security risks

• Web security tools and best practices (3) +

  • Web application and API security best practices
  • Web browser security
  • Web server threats and application attacks

• Wireless and mobile security (4) +

  • BYOD and mobile device security best practices
  • Mobile application security best practices
  • Mobile security threats and prevention
  • Wireless network security