1.1 Overview

2.1 Security and risk management
2.2 Information security management
2.3 Security controls
2.4 Information security management and governance
2.5 Goals, missions, and objectives
2.6 Due care
2.7 Security policy
2.8 Compliance
2.9 Cybercrimes
2.10 Legal systems
2.11 Intellectual Property (IP) law
2.12 Privacy
2.13 General data protection regulation
2.14 Security
2.15 Risk analysis and types
2.16 Security control assessment
2.17 Threat modeling
2.18 Supply-chain risk management
2.19 Third-party management
2.20 Business continuity planning and phases
2.21 Personal security management
2.22 Security awareness training
2.23 Program effectiveness evaluation

3.1 Information and data classification
3.2 Data life cycle and management
3.3 Different roles
3.4 Data remanence
3.5 Privacy
3.6 Data states
3.7 Data loss prevention

4.1 Security engineering and architecture
4.2 Security models
4.3 Evaluation criteria
4.4 System security
4.5 CPU
4.6 Memory
4.7 Security mode
4.8 Cloud Computing
4.9 IoT
4.10 Industrial control system (ICS)
4.11 Cryptography
4.12 Encryption methods
4.13 DES
4.14 Asymmetric cryptography
4.15 Public key infrastructure
4.16 Cryptanalysis
4.17 Key management
4.18 Critical path analysis
4.19 Site location
4.20 Fire
4.21 HVAC

5.1 Identity management
5.2 Biometrics
5.3 Passwords
5.4 Tokens
5.5 Memory cards and smart cards
5.6 Access and authorization
5.7 Identity management implementation
5.8 Kerberos
5.9 Access control types and models
5.10 Access control tools and techniques
5.11 Accountability
5.12 Access control monitoring
5.13 Identity proofing
5.14 Markup languages
5.15 Identity as a Service (IDaaS)

6.1 Network architecture and design
6.2 IP addressing
6.3 Network protocols
6.4 Transmission media
6.5 Firewall
6.6 Intrusion detection and prevention system
6.7 Network access control (NAC)
6.8 Content delivery network (CDN)
6.9 Networks
6.10 Software-defined networking (SDN)
6.11 Remote access
6.12 Internet Security Protocol (IPsec)
6.13 Voice Over Internet Protocol (VoIP)
6.14 Phreaking
6.15 Secure access protocols
6.16 Wireless technologies
6.17 Network attacks

7.1 Investigation
7.2 Forensic investigation
7.3 Evidence
7.4 Electronic discovery
7.5 Incident management
7.6 Security operations management
7.7 Identity and access management
7.8 Assets
7.9 Malware
7.10 Management
7.11 Recovery and backup
7.12 Disaster recovery
7.13 Perimeter security

8.1 Security assessment
8.2 Vulnerability assessment
8.3 Penetration testing
8.4 Audits
8.5 Log management
8.6 Synthetic and real transaction
8.7 Testing
8.8 Software testing
8.9 Interface
8.10 Key performance indicators (KPIs)

9.1 Importance of software development security
9.2 Programming concepts
9.3 Systems development life cycle
9.4 Application program interface
9.5 Software security and assurance
9.6 Database and data warehouse environments
9.7 Knowledge management
9.8 Web application environment
9.9 Security threats and attacks