Home / CPA Course / ISC

Threats and attacks

ISC Chapter 11 · Area II · Blueprint II.B.1

To defend anything, you first need to know who is coming and how. One Monday, Brightwater's accounts payable clerk receives a polite email from 'Ridgeline Supply' asking to update its bank account, and the story of this chapter begins. Priya and Sam meet the cast of threat agents, the attacks they use (from tailgating through the door to injecting code into the web store), the technical tricks behind them, the stages an attack moves through, the special risks of cloud, smart devices and phones, and how to think like an attacker with threat modeling. The chapter ends where the exam does: looking at a real organization's connections and systems and naming the threats that matter.

In this chapter

1. Threat agents: who might attack
2. Types of attack
3. Attack techniques
4. The stages of a cyberattack
5. Cloud, IoT and mobile risks
6. Threat modeling and the threat landscape
7. Finding the threats in real connections and systems

This chapter has 7 lessons, 52 practice MCQs with explanations and 20 simulations, plus flashcards and a recall sheet.

What this chapter covers

• Threat agents
• attack types and techniques
• stages of an attack
• cloud, IoT and mobile risks
• threat modeling

Chapter 10: CIS Controls and COBIT 2019 · Chapter 12: Protecting networks and systems