Module 1: Attacks,   Threats, and Vulnerabilities

· Compare and Contrast Information Security Roles

· Compare and Contrast Security Control and   Framework Types

· Explain Threat Actor Types and Attack Vectors

· Explain Threat Intelligence Sources

· Assess Organizational Security with Network   Reconnaissance Tools

· Explain Security Concerns with General Vulnerability   Types

· Summarize Vulnerability Scanning Techniques

· Explain Penetration Testing Concepts

· Compare and Contrast Social Engineering   Techniques

· Analyze Indicators of Malware-based Attacks

Module 2: Architecture   and Design

· Compare and Contrast Cryptographic Ciphers

· Summarize Cryptographic Modes of Operation

· Summarize Cryptographic Use Cases and Weaknesses

· Summarize Other Cryptographic Technologies

· Implement Certificates and Certificate   Authorities

· Implement PKI Management

· Summarize Authentication Design Concepts

· Implement Knowledge-based Authentication

· Implement Authentication Technologies

· Summarize Biometrics Authentication Concepts

· Implement Identity and Account Types

· Implement Account Policies

· Implement Authorization Solutions

· Explain the Importance of Personnel Policies

Module 3: Implementation

· Implement Secure Network Designs

· Implement Secure Switching and Routing

· Implement Secure Wireless Infrastructure

· Implement Load Balancers

· Implement Firewalls and Proxy Servers

· Implement Network Security Monitoring

· Summarize the Use of SIEM

· Implement Secure Network Operations Protocols

· Implement Secure Application Protocols

· Implement Secure Remote Access Protocols

· Implement Secure Firmware

· Implement Endpoint Security

· Explain Embedded System Security Implications

Module 4: Operations aSummarize   Incident Response Procedures

· Utilize Appropriate Data Sources for Incident   Response

· Apply Mitigation Controls

· Explain Key Aspects of Digital Forensics   Documentation

· Explain Key Aspects of Digital Forensics Evidence   Acquisitionnd Incident Response

Module 5: Governance,   Risk, and Compliance

· Explain Risk Management Processes and Concepts

· Explain Business Impact Analysis Concepts

· Implement Redundancy Strategies

· Implement Backup Strategies

· Implement Cybersecurity Resiliency Strategies

· Explain the Importance of Physical Site Controls

· Explain the Importance of Physical Host Security   Controls