Contracts and agreements are an important part of risk management. In this video, you’ll learn about service level agreements, memorandums of understanding, non-disclosure agreements, and more. << Previous Video: Third-party Risk Assessment Next Video: Compliance >> If you’re working with a service provider, you may want to set certain requirements for uptime or availability. And […]
Agreement Types – CompTIA Security+ SY0-701 – 5.3 Read More »
It’s often necessary to work with third-parties to mitigate risk. In this video, you’ll learn about right-to-audit clauses, supply chain analysis, vendor monitoring, and more. << Previous Video: Business Impact Analysis Next Video: Agreement Types >> Every organization works with vendors of some kind. These might be an organization that provides payroll services. You might
Third-party Risk Assessment – CompTIA Security+ SY0-701 – 5.3 Read More »
A security event can have a significant impact to the organization. In this video, you’ll learn how to determine a recovery time objective, recovery point objective, mean time to repair, and mean time between failures. << Previous Video: Risk Management Strategies Next Video: Third-party Risk Assessment >> When recovering from an outage, one of the
Business Impact Analysis – CompTIA Security+ SY0-701 – 5.2 Read More »
We have many options with managing risk. In this video, you’ll learn about transferring risk, accepting risk, avoiding risk, and more. << Previous Video: Risk Analysis Next Video: Business Impact Analysis >> An organization might use a number of different strategies to deal with risk. One of these strategies might be to transfer the risk.
Risk Management Strategies – CompTIA Security+ SY0-701 – 5.2 Read More »
To manage risk, we have to understand the risk we carry. In this video, you’ll learn about risk assessments, risk appetite, risk tolerance, and risk registers. << Previous Video: Risk Management Next Video: Risk Management Strategies >> Determining levels of risk can vary widely on how many different variables are involved. One way to evaluate
Risk management helps to understand the potential risks to an organization. In this video, you’ll learn about risk assessments, ad hoc assessments, and recurring assessments. << Previous Video: Data Roles and Responsibilities Next Video: Risk Analysis >> Most organizations have some level of risk management that allows them to identify where risks might be and
Risk Management – CompTIA Security+ SY0-701 – 5.2 Read More »
The management of data is the responsibility of many individuals. In this video, you’ll learn about data owners, data controllers, data processors, and more. << Previous Video: Security Considerations Next Video: Risk Management >> There are many different people in the organization responsible for different aspects of the data that we’re storing. And in this
Data Roles and Responsibilities – CompTIA Security+ SY0-701 – 5.1 Read More »
There are many requirements associated with IT security. In this video, you’ll learn about regulatory requirements, legal issues, industry standards, and more. << Previous Video: Security Procedures Next Video: Data Roles and Responsibilities >> IT security professionals have to be aware of regulations associated with the organization that they work for and the type of
Security Considerations – CompTIA Security+ SY0-701 – 5.1 Read More »
IT security maintains a number of procedures to ensure control of data and services. In this video, you’ll learn about change management, onboarding, offboarding, playbooks, and more. << Previous Video: Security Standards Next Video: Security Considerations >> One of the most common security procedures for almost any organization is one related to change management. Change
Security Procedures – CompTIA Security+ SY0-701 – 5.1 Read More »
