Companion-course connectionCybersecurity and Information Security
Cybersecurity and information security overlap substantially, but information security centers on protecting information while cybersecurity emphasizes risks arising from connected digital systems and cyberspace.
Open article →Companion-course connectionSecurity Program Management
Security program management coordinates strategy, governance, people, services, architecture, risk, operations, suppliers, assurance, investment, and improvement as one managed system.
Open article →Companion-course connectionSecurity Program Maturity
Security program maturity describes how consistently and effectively capabilities are governed, performed, measured, improved, and adapted to changing needs.
Open article →Companion-course connectionSecurity Strategy Alignment
Security strategy alignment connects protection priorities, capabilities, architecture, investment, and measures to enterprise mission, objectives, operating model, and risk appetite.
Open article →Companion-course connectionAI Control Operating Effectiveness
AI control operating effectiveness evaluates whether an appropriately designed control performed consistently, by the right people or automation, throughout the period under review.
Open article →Companion-course connectionIT Service Incident Management
IT service incident management restores normal service operation as quickly as practical while controlling impact, communication, escalation, evidence, and handoff to deeper analysis.
Open article →Companion-course connectionThreat Intelligence Requirements
Threat intelligence requirements translate stakeholder decisions and uncertainties into specific questions that collection and analysis can answer.
Open article →Companion-course connectionAI Shared-Responsibility Mapping
AI shared-responsibility mapping assigns control duties across model providers, cloud platforms, application teams, data owners, users, and oversight functions.
Open article →Companion-course connectionCloud Incident Response
Cloud incident response adapts preparation, detection, containment, eradication, and recovery to provider APIs, elastic resources, managed services, and shared responsibility.
Open article →Companion-course connectionControl Objectives
A control objective states the security or risk outcome a control or group of controls is intended to achieve, providing a basis for design, implementation, and assessment.
Open article →Companion-course connectionDigital Forensics
Digital forensics applies repeatable methods to identify, preserve, collect, examine, analyze, and communicate evidence from digital systems and services.
Open article →Companion-course connectionIncident Severity Classification
Incident severity classification assigns a consistent priority using factors such as mission impact, data sensitivity, scope, safety, legal obligations, adversary activity, and recovery difficulty.
Open article →
