You're reading from CISSP in 21 Days Boost your confidence and get the competitive edge you need to crack the exam in just 21 days!

Product type Paperback

Published in Jun 2016

Publisher

ISBN-13 9781785884498

Length 402 pages

Edition 2nd Edition

Concepts

Cybersecurity

Author (1):

M. L. Srinivasan

View More author details

Table of Contents (22) Chapters

Preface

1. Day 1 – Security and Risk Management - Security, Compliance, and Policies FREE CHAPTER

2. Day 2 – Security and Risk Management - Risk Management, Business Continuity, and Security Education

3. Day 3 – Asset Security - Information and Asset Classification

4. Day 4 – Asset Security - Data Security Controls and Handling

5. Day 5 – Exam Cram and Practice Questions

6. Day 6 – Security Engineering - Security Design, Practices, Models, and Vulnerability Mitigation

7. Day 7 – Security Engineering - Cryptography

8. Day 8 – Communication and Network Security - Network Security

9. Day 9 – Communication and Network Security - Communication Security

10. Day 10 – Exam Cram and Practice Questions

11. Day 11 – Identity and Access Management - Identity Management

12. Day 12 – Identity and Access Management - Access Management, Provisioning, and Attacks

13. Day 13 – Security Assessment and Testing - Designing, Performing Security Assessment, and Tests

14. Day 14 – Security Assessment and Testing - Controlling, Analyzing, Auditing, and Reporting

15. Day 15 – Exam Cram and Practice Questions

16. Day 16 – Security Operations - Foundational Concepts

17. Day 17 – Security Operations - Incident Management and Disaster Recovery

18. Day 18 – Software Development Security - Security in Software Development Life Cycle

19. Day 19 – Software Development Security - Assessing effectiveness of Software Security

20. Day 20 – Exam Cram and Practice Questions

21. Day 21 – Exam Cram and Mock Test

An overview of identity and access management

An asset, such as data, is accessed through systems and applications. Similarly, access to facilities such as data centers and operational areas are facilitated through access control mechanisms. Hence, physical or logical access to assets needs to establish the identity of the person or process scripts before determining the access permission.

Observe the following illustration. Users need access to data or physical facilities. Similarly, scripts or programs need access to data for processing and execution. Essentially, one type of asset needs access to another type of asset. The overall process of facilitating and managing identities of such assets, and controlling access while ensuring information security, is termed as Identity and Access Management (IAM):