CASP+ (CAS-004) Cert Prep: 4 Governance, Risk, and Compliance

Learn about the governance, risk, and compliance topics you need to know to pass the CompTIA Advanced Security Practitioner+ (CASP+) (CAS-004) exam.

Introduction

• Introduction

1. Data Considerations

• Data considerations
• Data security
• Data classification
• Data types
• Data retention
• Data destruction
• Data ownership
• Data sovereignty

2. Risk Management

• Risk management
• Risk strategies
• Risk management lifecycle
• Risk types
• Risk handling
• Risk tracking
• Risk assessment
• When risk management fails

3. Policies and Frameworks

• Policies and frameworks
• Policies
• Frameworks
• Regulations
• Standards
• Contracts and agreements
• Legal considerations
• Integrating industries

4. Business Continuity

• Business continuity
• Business continuity plan
• Business impact analysis
• Privacy impact analysis
• Incident response plan
• Testing plans

5. Risk Strategies

• Risk strategies
• Asset value
• Access control
• Aggregating risk
• Scenario planning
• Security controls
• Security solutions
• Cost of a data breach

6. Vendor Risk

• Vendor risk
• Business models
• Influences
• Organizational changes
• Shared responsibility model
• Viability and support
• Dependencies
• Considerations
• Supply chain

Conclusion

• Conclusion