Security Training for the IT Professional
“Security” means different things to many organizations. For some, security represents the degree of protection against loss, danger, or criminal activity. For others, security includes how loss or danger impacts safety, continuity, and reliability. To address these significant issues, a plethora of security oriented certifications have been created, each having a unique focus on the business as a whole as well as the roles and functions within the business. Subjects covered include management of a company’s security organization, physical security, data or software security, and network security.
The following paragraphs address the security industry’s most widely recognized exam:
The CISSP exam covers 10 security domains, and it's really 10 exams in one.
There are ten CISSP information systems security domains in the Common Body of Knowledge:
01. Access Control
04. Cryptography
Domains 1- 3 focus on specific problems and methodologies for securing access to systems and applications as well as business continuity planning – i.e., disaster recovery.
Domains 4-6 focus on securing the infrastructure as they reveal the nuts and bolts of how to best apply security to everyday computer and business operations. Fundamental concepts explored in these domains include how to effectively design security architectures, implement secure networks, and build security into applications and systems.
Finally, domains 7-10 cover the business of security, an area that is ignored far too often in some of today's "status quo" enterprises. Security is often thought of exclusively in terms of technology, but corporate security is much more. It involves industry governance, business management, and regulatory compliance, as well as an understanding of physical security, disaster recovery, and the law.






