Security Essentials Objectives V1.0 - Revision history

FabianThorns: /* 023 Node, Device and Storage Security */

2023-02-09T14:04:36Z

023 Node, Device and Storage Security

← Older revision		Revision as of 14:04, 9 February 2023
Line 364:		Line 364:
	<br />		<br />

	===''023 ~~Node,~~ Device and Storage Security''===		===''023 Device and Storage Security''===

	====<span style="color:navy">023.1 Hardware Security (weight: 2)</span>====		====<span style="color:navy">023.1 Hardware Security (weight: 2)</span>====

FabianThorns at 09:15, 18 January 2023

2023-01-18T09:15:12Z

← Older revision		Revision as of 09:15, 18 January 2023
Line 16:		Line 16:
	==Version Information==		==Version Information==

	These objectives are ~~'''A DRAFT FOR'''~~ version 1.0.0.		These objectives are version 1.0.0.

	<br />		<br />

GMatthewRice at 21:32, 15 November 2022

2022-11-15T21:32:30Z

← Older revision		Revision as of 21:32, 15 November 2022
Line 2:		Line 2:
	==Introduction==		==Introduction==

	This certificate covers a basic knowledge of IT security. The focus is the digital self-defense for an individual user. This includes a general understanding of the ~~main~~ threats against individual computing systems, networks, services and identity as well as approaches to prevent and mitigate them.		This certificate covers a basic knowledge of IT security. The focus is the digital self-defense for an individual user. This includes a general understanding of the common security threats against individual computing systems, networks, services and identity as well as approaches to prevent and mitigate them.

	<br />		<br />
Line 68:		Line 68:
	* Understanding of common roles in security		* Understanding of common roles in security

	* Understanding of common goals of ~~security~~ attacks		* Understanding of common goals of attacks against IT systems and devices

	* Understanding of the concept of attribution and related issues		* Understanding of the concept of attribution and related issues
Line 103:		Line 103:
	\| style="background:#eaeaea" \|		\| style="background:#eaeaea" \|

	The candidate should understand how to find and interpret relevant security information. This includes understanding the risk of a vulnerability and determining the need and urgency for a reaction.		The candidate should understand how to find and interpret relevant security information. This includes understanding the risk of a security vulnerability and determining the need and urgency for a reaction.

	\|}		\|}
Line 127:		Line 127:
	* Penetration testing		* Penetration testing

	* Untargeted ~~security~~ attacks and Advanced Persistent Threats (APT)		* Untargeted attacks and Advanced Persistent Threats (APT)

	* Zero-day security vulnerabilities		* Zero-day security vulnerabilities
Line 618:		Line 618:
	\| style="background:#eaeaea" \|		\| style="background:#eaeaea" \|

	The candidate should understand common security aspects of using networks and the Internet. This includes understanding of common threats against networks and networked computers, approaches for mitigation, as well as the ability to securely connect to a wired or wireless network.		The candidate should understand common security aspects of using networks and the Internet. This includes understanding of common security threats against networks and networked computers, approaches for mitigation, as well as the ability to securely connect to a wired or wireless network.

	\|}		\|}
Line 630:		Line 630:
	* Understanding of the concepts of traffic interception		* Understanding of the concepts of traffic interception

	* Understanding of common threats in the Internet along with approaches of mitigation		* Understanding of common security threats in the Internet along with approaches of mitigation

	'''Partial list of the used files, terms, and utilities:'''		'''Partial list of the used files, terms, and utilities:'''
Line 848:		Line 848:
	\| style="background:#eaeaea" \|		\| style="background:#eaeaea" \|

	The candidate should understand the importance of the confidentiality of personal information. This includes managing privacy settings in various online services and social media as well as being aware of common threats regarding personal information.		The candidate should understand the importance of the confidentiality of personal information. This includes managing privacy settings in various online services and social media as well as being aware of common security threats regarding personal information.

	\|}		\|}

GMatthewRice: /* 025.2 Information Confidentiality and Secure Communication (weight: 2) */

2022-11-15T21:26:18Z

025.2 Information Confidentiality and Secure Communication (weight: 2)

← Older revision		Revision as of 21:26, 15 November 2022
Line 799:		Line 799:
	\| style="background:#eaeaea" \|		\| style="background:#eaeaea" \|

	The candidate should ~~be able~~ to keep confidential information secret and ensure the confidentiality of digital communication. This includes recognizing attempts of phishing and social engineering, as well as using secure means of communication.		The candidate should understand how to keep confidential information secret and ensure the confidentiality of digital communication. This includes recognizing attempts of phishing and social engineering, as well as using secure means of communication.

	\|}		\|}

GMatthewRice: /* 023.4 Data Availability (weight: 2) */

2022-11-15T21:25:56Z

023.4 Data Availability (weight: 2)

← Older revision		Revision as of 21:25, 15 November 2022
Line 514:		Line 514:
	\| style="background:#eaeaea" \|		\| style="background:#eaeaea" \|

	The candidate should ~~be able~~ to ensure the availability of their data. This includes storing data on appropriate devices and services as well as creating backups.		The candidate should understand how to ensure the availability of their data. This includes storing data on appropriate devices and services as well as creating backups.

	\|}		\|}

GMatthewRice: /* 021.2 Risk Assessment and Management (weight: 2) */

2022-11-15T21:25:26Z

021.2 Risk Assessment and Management (weight: 2)

← Older revision		Revision as of 21:25, 15 November 2022
Line 103:		Line 103:
	\| style="background:#eaeaea" \|		\| style="background:#eaeaea" \|

	The candidate should ~~know~~ how to find and interpret relevant security information. This includes understanding the risk of a vulnerability and determining the need and urgency for a reaction.		The candidate should understand how to find and interpret relevant security information. This includes understanding the risk of a vulnerability and determining the need and urgency for a reaction.

	\|}		\|}

GMatthewRice at 21:24, 15 November 2022

2022-11-15T21:24:09Z

← Older revision		Revision as of 21:24, 15 November 2022
Line 62:		Line 62:
	'''Key Knowledge Areas:'''		'''Key Knowledge Areas:'''

	* ~~Understand~~ the importance of IT security		* Understanding of the importance of IT security

	* ~~Understand~~ common security goals		* Understanding of common security goals

	* ~~Understand~~ common roles in security		* Understanding of common roles in security

	* ~~Understand~~ common goals of security attacks		* Understanding of common goals of security attacks

	* ~~Understand~~ the concept of attribution and related issues		* Understanding of the concept of attribution and related issues

	'''Partial list of the used files, terms, and utilities:'''		'''Partial list of the used files, terms, and utilities:'''
Line 111:		Line 111:
	* Know common sources for security information		* Know common sources for security information

	* ~~Understand~~ security incident classification schema and important types of security vulnerabilities		* Understanding of security incident classification schema and important types of security vulnerabilities

	* ~~Understand~~ the concepts of security assessments and IT forensics		* Understanding of the concepts of security assessments and IT forensics

	* Awareness of Information Security Management Systems (ISMS) and Information Security Incident Response Plans and Teams		* Awareness of Information Security Management Systems (ISMS) and Information Security Incident Response Plans and Teams
Line 756:		Line 756:
	* Understanding of the role of email accounts for IT security		* Understanding of the role of email accounts for IT security

	* ~~Understand~~ how passwords are stored in online services		* Understanding of how passwords are stored in online services

	* ~~Understand~~ common attacks against passwords		* Understanding of common attacks against passwords

	* Monitoring personal accounts for password leaks (e.g. search engine alerts for usernames and password leak checkers)		* Monitoring personal accounts for password leaks (e.g. search engine alerts for usernames and password leak checkers)

GMatthewRice: /* 021.1 Goals, Roles and Actors (weight: 1) */

2022-11-15T21:22:35Z

021.1 Goals, Roles and Actors (weight: 1)

← Older revision		Revision as of 21:22, 15 November 2022
Line 69:		Line 69:

	* Understand common goals of security attacks		* Understand common goals of security attacks

			* Understand the concept of attribution and related issues

	'''Partial list of the used files, terms, and utilities:'''		'''Partial list of the used files, terms, and utilities:'''

GMatthewRice: /* 025.3 Privacy Protection (weight: 2) */

2022-11-15T21:17:22Z

025.3 Privacy Protection (weight: 2)

← Older revision		Revision as of 21:17, 15 November 2022
Line 856:		Line 856:
	* Understanding of how personal information can be used for a malicious purpose		* Understanding of how personal information can be used for a malicious purpose

	* Understanding of the concepts of information gathering, profiling and user tracking		* Understanding of the concepts of information gathering, profiling, and user tracking

	* Managing profile privacy settings on social media platforms and online services		* Managing profile privacy settings on social media platforms and online services
Line 862:		Line 862:
	* Understanding of the risk of publishing personal information		* Understanding of the risk of publishing personal information

	* Understanding of the rights regarding ~~information about~~ personal information (~~such as~~ GDPR ~~in Europe~~)		* Understanding of the rights regarding personal information (e.g. GDPR)

	'''Partial list of the used files, terms, and utilities:'''		'''Partial list of the used files, terms, and utilities:'''
Line 868:		Line 868:
	* Stalking and cybermobbing		* Stalking and cybermobbing

	* HTTP cookies, browser fingerprinting ~~and~~ user tracking		* HTTP cookies, browser fingerprinting, user tracking

	* Script blockers and ad blockers in web browsers		* Script blockers and ad blockers in web browsers

GMatthewRice: /* 025.2 Information Confidentiality and Secure Communication (weight: 2) */

2022-11-15T21:14:31Z

025.2 Information Confidentiality and Secure Communication (weight: 2)

← Older revision		Revision as of 21:14, 15 November 2022
Line 797:		Line 797:
	\| style="background:#eaeaea" \|		\| style="background:#eaeaea" \|

	The candidate should be able to keep confidential information secret and to ensure the confidentiality of digital communication. This includes recognizing attempts of ~~Phishing~~ and social engineering, as well as using ~~secret and safe ways~~ of communication.		The candidate should be able to keep confidential information secret and ensure the confidentiality of digital communication. This includes recognizing attempts of phishing and social engineering, as well as using secure means of communication.

	\|}		\|}
Line 805:		Line 805:
	* Understanding the implications and risks of data leaks and intercepted communication		* Understanding the implications and risks of data leaks and intercepted communication

	* Understanding of ~~Phishing~~ and social engineering and scamming		* Understanding of phishing and social engineering and scamming

	* Understanding the concepts of email spam filters		* Understanding the concepts of email spam filters
Line 823:		Line 823:
	* Scamming and scareware		* Scamming and scareware

	* Email spam ~~and~~ email spam filtering		* Email spam, email spam filtering

	* Non disclosure agreements (NDA)		* Non-disclosure agreements (NDA)

	* Information classification		* Information classification