Asset Security
CISSP Domain 2 in depth: asset inventories and valuation, classification under EO 13526, CUI and FIPS 199 and commercial schemes, data roles from owner to processor, handling rules, secure provisioning and end of support, the data life cycle and data residency, data states and protection methods, remanence and sanitization under NIST SP 800-88, retention under IRS, HIPAA and SEC rules and the CCPA, privacy by design, baselines, DRM, DLP and CASB, and a capstone asset program.
CISSP-111 12 lessons · 5 h 25 min
Offered by HSM University · CISSP Exam Prep
This is the American version of this course. See the Canadian version.
What you'll learn
- Identify tangible and intangible assets, build and maintain an asset inventory, and value assets using lenses suited to the harm being assessed
- Design and apply classification schemes based on harm, including government and commercial schemes, and use markings and labels consistently
- Distinguish data owners, system owners, custodians, users, controllers, processors and data subjects, and assign responsibilities accordingly
- Establish handling requirements for storage, transmission, printing, media, travel and external sharing at each classification level
- Provision assets securely with registration, hardened baselines and role-based access, and manage licenses, SBOMs and end of support
- Manage data across its life cycle, including minimization at collection, location decisions, purpose limitation, maintenance and archiving
- Protect data at rest, in transit and in use, and choose among encryption, hashing, tokenization, masking, pseudonymization and anonymization
- Explain data remanence and select clear, purge or destroy methods by media type and sensitivity, with verification and certificates
- Build retention schedules that balance legal minimums and privacy maximums, apply legal holds and carry out records disposition
- Apply privacy principles, privacy by design, privacy impact assessments and de-identification to the protection of personal information
- Scope and tailor control baselines, select standards, and use DRM, DLP and CASB to protect data and demonstrate compliance
- Design an integrated asset classification and handling program for a mid-sized organization with measurable outcomes
Course content
12 lessons · 5 h 25 min total · final exam
- 1 Assets and information as assets 30 min · quiz
- 2 Classification schemes and labeling in the US and in business 25 min · quiz
- 3 Data roles and responsibilities 27 min · quiz
- 4 Handling requirements: marking, storage, transmission and media 27 min · quiz
- 5 Secure provisioning and asset life cycle management 26 min · quiz
- 6 The data life cycle: from collection to destruction 27 min · quiz
- 7 Data states and protection methods 28 min · quiz
- 8 Data remanence and media sanitization 27 min · quiz
- 9 Retention, legal holds and records management in the US 27 min · quiz
- 10 Privacy protection in asset security 27 min · quiz
- 11 Data security controls and compliance 27 min · quiz
- 12 Capstone: an asset classification and handling program 27 min · quiz
- E Final exam 20 questions
Requirements
Recommended background. You can start any course at any time.
Description
CISSP Domain 2 in depth: asset inventories and valuation, classification under EO 13526, CUI and FIPS 199 and commercial schemes, data roles from owner to processor, handling rules, secure provisioning and end of support, the data life cycle and data residency, data states and protection methods, remanence and sanitization under NIST SP 800-88, retention under IRS, HIPAA and SEC rules and the CCPA, privacy by design, baselines, DRM, DLP and CASB, and a capstone asset program.