Protecting networks and systems

ISC Chapter 12 · Area II · Blueprint II.B.2

Chapter 11 showed who attacks and how. This chapter builds the walls, the locks and the alarms. Brightwater's audit committee approves a security program after the Ridgeline fraud and a near miss with ransomware, and Priya helps Omar put it together: segment the network, secure remote and wireless access, harden every device, run vulnerability management as a cycle, stack defenses in layers, give everyone only the access they need, move toward zero trust, write an acceptable use policy that covers personal phones, and finally use COSO's guidance to show the board how cyber risk fits into enterprise risk and internal control.

In this chapter

Dividing the network: segmentation and firewalls
Remote access, wireless, endpoints, hardening and intrusion detection
Vulnerability management
Layered security and defense in depth
Least privilege, need to know, zero trust and allowlisting
Acceptable use, mobile devices and BYOD
Using COSO to assess cyber risk and controls

This chapter has 7 lessons, 51 practice MCQs with explanations and 20 simulations, plus flashcards and a recall sheet.

What this chapter covers

Segmentation, VPN, wireless and endpoint security
vulnerability management
defense in depth
least privilege and zero trust
acceptable use and BYOD
COSO and cyber risk

Chapter 11: Threats and attacks · Chapter 13: Controls, authentication and authorization