Handbook

Describe the fundamentals of information and computer security, security controls, security functions and information security system implementation planning.

Develop contingency plans and execute a test of contingency plans.

Create an information security policy and present its major components.

Recommend and develop security measures as part of a security program, such as staffing plans, intrusion detection systems and security practices for employees.

Identify security threats, assess the risk of adverse events and evaluate the possible effects on information assets.

Describe ethical and legal issues associated with information and computer security.

Identify and apply information security standards and models, such as NIST, ISO.