Lesson plan

Total Video Time 27:29

Lab/Activity

• 
  4.6.5 Respond to Social Engineering
  

Fact Sheets

• 
  4.6.3 Social Engineering Facts
  

Number of Exam Questions

Total Time

4.7: Certification and Accreditation

Lecture Focus Questions:

• 
  Which methods does a reference monitor use to determine levels of access?
  
• 
  Where is the reference monitor in relation to the security perimeter?
  
• 
  How does layering provide security to an operating system?
  
• 
  In a layered system, where does the operating system function?
  
• 
  How does commercial classification labeling differ from military?
  
• 
  How does acceptance differ from certification and accreditation?
  

Video/Demo Time

• 
  4.7.1 Trusted Computing 10:01
  
• 
  4.7.2 Certification and Accreditation 4:46
  

Total Video Time 14:47

Fact Sheets

• 
  4.7.3 Certification and Accreditation Facts
  

Number of Exam Questions

Total Time

4.8: Development

Lecture Focus Questions:

• 
  How does the spiral model combine the waterfall model and the prototype model?
  
• 
  How should security be employed in the different stages of development?
  
• 
  What does functional design entail?
  
• 
  When is change control necessary?
  
• 
  What are the responsibilities of developers after a product is released?
  

Video/Demo Time

• 
  4.8.1 System Development Life Cycle 8:40
  
• 
  4.8.2 System Development Life Cycle 2 7:49
  

Total Video Time 16:29

Fact Sheets

• 
  4.8.3 SDLC Facts
  
• 
  4.8.4 Software Development Models
  

Number of Exam Questions

Total Time

4.9: Employee Management

Lecture Focus Questions:

• 
  How can pre-employment processing improve the security of an organization?
  
• 
  What is the role of the policy handbook regarding security?
  
• 
  What guidelines must be considered when monitoring employees?
  
• 
  Why should employees be required to sign employment agreements?
  
• 
  How are separation of duties and two-man control different?
  
• 
  How can collusion be avoided?
  
• 
  What is the importance of a clear job description?
  

Video/Demo Time

• 
  4.9.1 Employment Practices 13:45
  

Total Video Time 13:45

Fact Sheets

• 
  4.9.2 Employee Management Facts
  
• 
  4.9.3 Employee Documents Facts
  
• 
  4.9.4 Ethics Facts
  

Number of Exam Questions

Total Time

4.10: Third-Party Integration

Lecture Focus Questions:

• 
  What security issues must be identified and addressed during the onboarding phase of a third-party relationship?
  
• 
  What are the key documents that are included in an Interoperability Agreement (IA)?
  
• 
  What is the role of the Service Level Agreement (SLA)?
  
• 
  During the ongoing phase of the relationship, how do you ensure that security has not been compromised?
  
• 
  Which items need to be disabled or reset during the off-boarding phase of the relationship?
  

Video/Demo Time

• 
  4.10.1 Third-Party Integration Security Issues 11:24
  

Total Video Time 11:24

Fact Sheets

• 
  4.10.2 Third-Party Integration Security Facts
  

Number of Exam Questions

Total Time