You're reading from ISACA Certified in Risk and Information Systems Control (CRISC®) Exam Guide

Product type Book

Published in Sep 2023

Publisher Packt

ISBN-13 9781803236902

Pages 316 pages

Edition 1st Edition

Languages

Concepts

Cybersecurity

Author (1):

Shobhit Mehta

Table of Contents (28) Chapters

Preface

1. Part 1: Governance, Risk, and Compliance and CRISC

2. Chapter 1: Governance, Risk, and Compliance

3. Chapter 2: CRISC Practice Areas and the ISACA Mindset

4. Part 2: Organizational Governance, Three Lines of Defense, and Ethical Risk Management

5. Chapter 3: Organizational Governance, Policies, and Risk Management

6. Chapter 4: The Three Lines of Defense and Cybersecurity

7. Chapter 5: Legal Requirements and the Ethics of Risk Management

8. Part 3: IT Risk Assessment, Threat Management, and Risk Analysis

9. Chapter 6: Risk Management Life Cycle

10. Chapter 7: Threat, Vulnerability, and Risk

11. Chapter 8: Risk Assessment Concepts, Standards, and Frameworks

12. Chapter 9: Business Impact Analysis, and Inherent and Residual Risk

13. Part 4: Risk Response, Reporting, Monitoring, and Ownership

14. Chapter 10: Risk Response and Control Ownership

15. Chapter 11: Third-Party Risk Management

16. Chapter 12: Control Design and Implementation

17. Chapter 13: Log Aggregation, Risk and Control Monitoring, and Reporting

18. Part 5: Information Technology, Security, and Privacy

19. Chapter 14: Enterprise Architecture and Information Technology

20. Chapter 15: Enterprise Resiliency and Data Life Cycle Management

21. Chapter 16: The System Development Life Cycle and Emerging Technologies

22. Chapter 17: Information Security and Privacy Principles

23. Part 6: Practice Quizzes

24. Chapter 18: Practice Quiz – Part 1

25. Chapter 19: Practice Quiz – Part 2

26. Index

Why subscribe?

27. Other Books You May Enjoy

Firewalls

A firewall is a network security device that monitors both incoming and outgoing network traffic and either permits or prohibits specific traffic based on predefined security rules. A firewall can be a physical device (hardware) or software. The following is a summary of different types of firewalls that can be installed as hardware or software:

Packet filtering firewall: These firewalls compare each packet to established criteria and allow/deny packet traffic based on predefined rules. These firewalls work on Layer 3 (the network layer) of the OSI model.
Circuit-level gateway firewall: These firewalls monitor TCP handshakes and established sessions to determine the legitimacy of the traffic. These firewalls work on Layer 5 (the session layer) of the OSI model.
Application-level gateway firewall: These firewalls provide the most secure connectivity as they examine each layer of communication. These firewalls work on the application layer (Layer 7) of the OSI...