| Week 9 – 32 pages and 30 multiple choice questions | |||||
|---|---|---|---|---|---|
| Read Chapters 22, 23 and 24 again | |||||
| Chapter 25 – Explain the processes associated with third-party risk assessment and management – 7 pages
Chapter 26 – Summarize elements of effective security compliance – 8 pages Chapter 27 – Explain types and purposes of audits and assessments – 7 pages Chapter 28 – Given a scenario, implement security awareness practices – 10 pages |
|||||
| Action – Ian’s Book | Key Elements | ||||
|
Vendor assessments
Vendor selection Agreement types Vendor monitoring Questionnaires Rules of engagment Compliance reporting Consequences of non-compliance Compliance monitoring Privacy Attestation Internal audits External audits Penetration testing Phishing campaigns Anomalous behavior recognition Reporting and monitoring Development and execution of security awareness training Videos Malicious USB Cable |
||||