Forwarded from CISSP Practice Question 2025
My CISSP One Liner Notes [https://www.linkedin.com/pulse/cissp-know-difference-prabh-nair-imk1c]
Linkedin
CISSP: Know the Difference
One-Line Notes to Separate the Concepts That Look Almost the Same Domain 1 โ Security and Risk Management Governance Governance = decides direction, accountability and oversight; management = executes that direction. Strategy = where security needs to go;โฆ
โค7๐3
๐๐จ๐ฎ๐ซ ๐๐ซ๐๐ก๐ข๐ญ๐๐๐ญ๐ฎ๐ซ๐ ๐ฆ๐๐ฒ ๐ฅ๐จ๐จ๐ค ๐ฌ๐๐๐ฎ๐ซ๐ ๐จ๐ง ๐ฉ๐๐ฉ๐๐ซ.
But has anyone actually threat modeled it? Most security problems are discovered after development, during testing, or worse after an incident.
๐๐ก๐ข๐ฌ 2-๐๐๐ฒ ๐๐๐ง๐๐ฌ-๐๐ง ๐๐ก๐ซ๐๐๐ญ ๐๐จ๐๐๐ฅ๐ข๐ง๐ ๐๐จ๐จ๐ญ๐๐๐ฆ๐ฉ ๐ข๐ฌ ๐๐๐ฌ๐ข๐ ๐ง๐๐ ๐ญ๐จ ๐ก๐๐ฅ๐ฉ ๐ฒ๐จ๐ฎ ๐ข๐๐๐ง๐ญ๐ข๐๐ฒ ๐ฌ๐๐๐ฎ๐ซ๐ข๐ญ๐ฒ ๐ซ๐ข๐ฌ๐ค๐ฌ ๐๐ญ ๐ญ๐ก๐ ๐๐๐ฌ๐ข๐ ๐ง ๐ฌ๐ญ๐๐ ๐, ๐๐๐๐จ๐ซ๐ ๐๐ญ๐ญ๐๐๐ค๐๐ซ๐ฌ ๐๐ข๐ง๐ them. You ๐ฐ๐ข๐ฅ๐ฅ ๐ฐ๐จ๐ซ๐ค ๐จ๐ง ๐ซ๐๐๐ฅ ๐๐ง๐ญ๐๐ซ๐ฉ๐ซ๐ข๐ฌ๐ ๐๐ซ๐๐ก๐ข๐ญ๐๐๐ญ๐ฎ๐ซ๐ ๐ฌ๐๐๐ง๐๐ซ๐ข๐จ๐ฌ ๐๐ง๐ ๐ฅ๐๐๐ซ๐ง ๐ก๐จ๐ฐ ๐ญ๐จ
โข Build Data Flow Diagrams
โข Identify Trust Boundaries
โข Apply STRIDE systematically
โข Build Attack Trees
โข Identify realistic threats
โข Prioritize security risks
โข Recommend practical mitigations
Find the security flaw before the attacker does.
https://www.infosectrain.com/bootcamp/threat-modeling-training/?utm_source=tg&utm_medium=vpshare&utm_campaign=ThreatBootcamp
But has anyone actually threat modeled it? Most security problems are discovered after development, during testing, or worse after an incident.
๐๐ก๐ข๐ฌ 2-๐๐๐ฒ ๐๐๐ง๐๐ฌ-๐๐ง ๐๐ก๐ซ๐๐๐ญ ๐๐จ๐๐๐ฅ๐ข๐ง๐ ๐๐จ๐จ๐ญ๐๐๐ฆ๐ฉ ๐ข๐ฌ ๐๐๐ฌ๐ข๐ ๐ง๐๐ ๐ญ๐จ ๐ก๐๐ฅ๐ฉ ๐ฒ๐จ๐ฎ ๐ข๐๐๐ง๐ญ๐ข๐๐ฒ ๐ฌ๐๐๐ฎ๐ซ๐ข๐ญ๐ฒ ๐ซ๐ข๐ฌ๐ค๐ฌ ๐๐ญ ๐ญ๐ก๐ ๐๐๐ฌ๐ข๐ ๐ง ๐ฌ๐ญ๐๐ ๐, ๐๐๐๐จ๐ซ๐ ๐๐ญ๐ญ๐๐๐ค๐๐ซ๐ฌ ๐๐ข๐ง๐ them. You ๐ฐ๐ข๐ฅ๐ฅ ๐ฐ๐จ๐ซ๐ค ๐จ๐ง ๐ซ๐๐๐ฅ ๐๐ง๐ญ๐๐ซ๐ฉ๐ซ๐ข๐ฌ๐ ๐๐ซ๐๐ก๐ข๐ญ๐๐๐ญ๐ฎ๐ซ๐ ๐ฌ๐๐๐ง๐๐ซ๐ข๐จ๐ฌ ๐๐ง๐ ๐ฅ๐๐๐ซ๐ง ๐ก๐จ๐ฐ ๐ญ๐จ
โข Build Data Flow Diagrams
โข Identify Trust Boundaries
โข Apply STRIDE systematically
โข Build Attack Trees
โข Identify realistic threats
โข Prioritize security risks
โข Recommend practical mitigations
Find the security flaw before the attacker does.
https://www.infosectrain.com/bootcamp/threat-modeling-training/?utm_source=tg&utm_medium=vpshare&utm_campaign=ThreatBootcamp
Happy To Release the Documentary of Data Center [https://youtu.be/wrYp0OU9hHs]
โค6
20 years ago, I used to rap and play drums. Then life, career, and responsibilities took over.
๐ฅ Six months ago, I recorded three songs. Today, I'm excited to share *CISSP Motivation โ a hip-hop tribute to every cybersecurity learner chasing a dream and refusing to give up!* ๐ถ
๐ฅ Six months ago, I recorded three songs. Today, I'm excited to share *CISSP Motivation โ a hip-hop tribute to every cybersecurity learner chasing a dream and refusing to give up!* ๐ถ
โค19๐ฅ4