Security Program Management

Domain 5 of the CompTIA Security+ SY0-701 exam, worth 20% of your score.

7 topics 4 free to read

• Security Governance
  Policies, procedures, standards, guidelines, and major security frameworks.
• Risk Management
  Risk identification, assessment, treatment strategies, BIA, and quantitative vs. qualitative analysis.
• Third-Party Risk & Vendor Management
  Vendor assessment, legal agreements, shared responsibility, and supply chain risk management.
• Compliance & Data Privacy

  Regulatory compliance, data privacy laws, breach notification requirements, and compliance monitoring.
• Audits & Assessments

  Internal and external audits, attestation, penetration testing types, and vulnerability assessments.
• Security Awareness Training

  Security awareness programs, training topics, phishing simulations, and the insider threat program.
• Acronyms - Security Program Management
  Governance, the quantitative risk formula, the agreement types and the regulations - including which document covers which situation…