| Section | Weight | Objectives |
|---|
| Topic 1: Security Program Management and Oversight | 14% | - Business Continuity and Incident Management
- 1. BCP, DRP, RTO, RPO, Communication Plans
- Personnel and Vendor Security
- 1. Awareness Training, Background Checks, Third-Party Risk, Data Processors
- Governance, Risk, and Compliance
- 1. Frameworks, Policies, Risk Assessment, Mitigation Strategies
- Audit and Assessment
- 1. Controls Testing, Cyber Kill Chain/Diamond Model as Reference
|
| Topic 2: Security Architecture | 19% | - Enterprise and Cloud Security Models
- 1. Zero Trust Architecture, SASE/SSE, On-Premises, Hybrid, Multi-Cloud
- Secure Infrastructure Design
- 1. Segmentation, Bastion Hosts, Honeypots, Canary Accounts, Secrets Management
- Identity and Access Management Architecture
- 1. gMSAs, Passkeys, Emergency Access, Federation, SSO, MFA
- Data Security and Resilience
- 1. Classification, Encryption at Rest/In Transit, Backup Immutability, Retention
|
| Topic 3: Threats, Vulnerabilities, and Attacks | 24% | - Vulnerability Management and Assessment
- 1. CVSS, CVE, NVD, Scanning, Prioritization
- AI-Specific Threats and Vulnerabilities
- 1. Prompt Injection, Data Poisoning, Model Manipulation, Hallucinations, Privacy Risks, Explainability
- Social Engineering and Phishing Variants
- 1. Quishing, Deepfakes, Pretexting, Phishing, Vishing, Smishing
- Network, Host, and Application Attacks
- 1. Malware, Fileless Malware, Lateral Movement, LLM/AI as Attack Surfaces
- Threat Actors, Vectors, and Intelligence
- 1. APTs, Insiders, State-Sponsored, Cybercrime; Motives and Profiles
|
| Topic 4: General Security Concepts | 16% | - Cryptography Fundamentals & PKI
- 1. Symmetric/Asymmetric Encryption, Hashing, Digital Signatures, Certificates, CAs, CRLs, OCSP
- Core Security Principles
- 1. CIA Triad, Defense in Depth, Zero Trust, Least Privilege, AAA, Non-repudiation
- Security Control Categories & Types
- 1. Technical, Managerial, Physical, Operational; Preventive, Detective, Corrective, Deterrent, Compensating
- Security in Change Management
- 1. Approval Processes, Impact Analysis, Backout Planning, Documentation
|
| Topic 5: Security Operations | 27% | - Identity and Access Management Operations
- 1. Provisioning/Deprovisioning, Access Reviews, Privileged Access Management
- Endpoint, Network, and Application Protection
- 1. EDR/XDR, NGFW, WAF, Hardening, Patching, Vulnerability Remediation
- Monitoring, Detection, and Response
- 1. SIEM, SOAR, Log Analysis, Alert Triage, Incident Handling Lifecycle
- Email and Communications Security
- 1. SPF, DKIM, DMARC, BIMI, Anti-Spoofing Measures
- Automation and AI in Security Operations
- 1. Orchestration, Agentic AI, Predictive Analysis, AI-Augmented Baselines
|
