MAC (Mandatory Access Control): Often used when Confidentiality is most important. Almost always used in the military or in organizations where confidentiality is very important, rarely used in the private…

RBAC (Role Based Access Control): Often used when data integrity is most important. Most large organizations use role based access control, your access levels are determined by your job role.…

For the launch they are marked down from $75 to $10!

Take the practice test, find your weak areas, study those and then take it again, rinse/repeat as much as needed.

The questions and answers are randomized each time so it will feel like a new exam if you take it multiple times.

(more…)

Sunflower cheat sheet for the CISSP certification. 37 pages of quick references and mnemonic tricks. Download from my facebook group. Mahalos for making it Maartenn de Frankrijker!

In access control, we use the terms subjects and objects. Knowing the difference and what both can do is important for the exam. Subject – (Active) Most often users, but…

Qualitative vs. Quantitative Risk Analysis. For any Risk analysis we need to identify our assets. What are we protecting? Qualitative Risk Analysis – How likely is it to happen and…

7 Cybersecurity Questions Every Leader Should Ask Theresa Payton, former CIO for the White House and current CEO of Fortalice Solutions, a cybersecurity and intelligence consulting firm, identifies the seven…

Equifax Inc. (NYSE: EFX) announced on 9/7 a cybersecurity incident potentially impacting 143 million U.S. residents.   The attackers exploited a website application vulnerability and gained access to certain files.…

Quantitative Risk Analysis – We want exactly enough security for our needs. We find the asset’s value: How much of it is compromised, how much one incident will cost, how…