Security governance through principles and policies -- Personnel security and risk management concepts -- Business continuity planning -- Laws, regulations, and compliance -- Protecting security of assets -- Cryptography and symmetric key algorithms -- PKI and cryptographic applications -- Principles of security models, design and capabilities -- Security vulnerabilities, threats, and countermeasures -- Physical security requirements -- Secure network architecture and securing network components -- Secure communications and network attacks -- Managing identity and authentication -- Controlling and monitoring access -- Security assessment and testing -- Managing security operations -- Preventing and responding to incidents -- Disaster recovery planning -- Investigations and ethics -- Software development security -- Malicious code and application attacks -- Appendix A. Answers to review questions -- Appendix B. Answers to written labs.