ISC2 SSCP: Security Monitoring and Incident Response
Security monitoring and incident response The current ISC2 SSCP outline treats monitoring and incident response as connected operational work. Administrators are expected to…
Read article03 / THE LATESTFresh thinking
From the editorial desk.
New technical explainers, certification perspectives and practical ideas.
ISC2 SSCP: Network and Communications Security
Protecting networks and communications The current ISC2 SSCP outline treats network security as an operational discipline rather than a list of ports and…
Read articleISC2 SSCP: Access Controls and Identity Operations
Identity and access controls in ISC2 SSCP The current ISC2 SSCP exam outline, effective October 1, 2025, places access control in an operational…
Read articleISACA COBIT 2019: Aligning IT with Business Goals Using COBIT
Aligning enterprise goals and technology outcomes Alignment fails when technology planning starts with a product list instead of a business objective. COBIT 2019…
Read articleISACA COBIT 2019: COBIT Governance and Management Objectives
COBIT 2019 governance objectives COBIT 2019 is a framework for the governance and management of enterprise information and technology, not a catalog of…
Read articleCompTIA SY0-701: Zero Trust Architecture
Zero trust is easiest to misunderstand when it is reduced to a slogan such as “never trust, always verify.” A useful resource-access policy…
Read articleCompTIA SY0-701: Vulnerability Management from Scan to Remediation
A vulnerability scan can generate hundreds of findings without telling an administrator which change will reduce the most risk. Consider a hypothetical customer…
Read articleCompTIA SY0-701: Threat Intelligence Sources and Analysis
A threat-intelligence feed reports that an IP address seen in company firewall logs is associated with credential theft. Should the security team block…
Read articleCompTIA SY0-701: Security Hardening for Endpoints and Servers
A company standardizes the security settings on sixty managed laptops and twelve application servers. The deployment dashboard reports that the hardening policy was…
Read articleCompTIA SY0-701: Security Awareness That Changes User Behavior
The finance team receives an urgent message claiming that a long-standing supplier has changed banks. The email uses the supplier’s familiar logo and…
Read articleCompTIA SY0-701: Secure Cloud Architecture
A payroll team moves reports into a cloud application. The migration appears successful: employees can sign in, reports load quickly and infrastructure costs…
Read articleCompTIA SY0-701: SIEM Fundamentals and Security Event Correlation
At 02:14, a privileged account authenticates from an unfamiliar network. Two minutes later, a file server records an unusually large export. A security…
Read articleCompTIA SY0-701: Risk Registers, Risk Appetite, and Risk Treatment
A regional museum discovers that the ticketing application used for online reservations runs a gateway component with a newly reported security weakness. The…
Read articleCompTIA SY0-701: RTO, RPO, and Recovery Strategy Decisions
A service can restart quickly and still fail the organization’s recovery objective. Suppose a hypothetical payments application must accept new orders within 30…
Read articleCompTIA SY0-701: PKI, Certificates, and Trust Chains
Certificate failures are often reported as “the network is down,” even when IP connectivity and routing are healthy. Imagine a hypothetical payroll application…
Read article