CISSP Day 1: Access Control

In CISSP, Access Control consider 'Avaliability', 'Integrity' and "Confidenticiality'.

To archive these 3 area, it has "Identify", "Authentication", "Authorization" and "Accountability".

In the Authentication has 3 factors.  Any 2 of 3 can be including in an authentication, it will consider as 'Storng Authentication'.  They are,

1. something that the person know
2. something that the person has
3. something that specific for the person

Most of time, we uses 'Logical Access Control' to do these area.  In CISSP, "Logical Access Control" is equal to "Technical Access Control".

In CISSP, identification management will consider on 6 areas.  They are,

1. Directory management
2. Web access management
3. Priavcy single-sign on
4. Password management
5. Account management
6. Profile update

My CISSP Studying Plan & Progress

I like to have plan and finish my target slowly. Therefore, I tried to plan my CISSP studying schedule with my progress update here.

Develop a Google gadget about my CISSP studying progress

I'm thinking about develop a Google gadget for display my road to CISSP studying progress.

CISSP preparation

With my girl friend, Helen, encouragement. I decided to start my CISSP exam preparation.

Yeah... It's no guarantee on the successful of exam.  But, I'll try my best arrangement and study hard on this.

Firstly, I'll selected the CISSP Certification All-in-One Exam Guide 4th.Ed as my major study reference.

Secondly, I have my plan of studying according to each CBK section size in the book as this.