Researching, Implementing, and Managing Engineering Processes Securely
In this section, you will review 11 design principles that are critical when employing secure architectures. These models are listed as follows:
- Threat modeling
- Least privilege
- Defense in depth
- Secure defaults
- Fail securely
- Separation of duties
- Keep it simple
- Zero trust
- Privacy by design
- Trust but verify
- Shared responsibility
The CISSP candidate must know the basics of these secure design principles and understand that multiple principles are used when securing an organization’s architecture. The following sections delve into each model in detail.
Threat Modeling
Threat modeling is the process of identifying and enumerating potential threats. Security firms and departments use threat modeling to address potential attacks against their information systems. Pen testing (short for penetration testing – not to be misconstrued as testing with...
