GIAC Information Security Fundamentals & Certified ISO-27000 Specialist Certification Exams ExamFOCUS Study Notes & Review Questions 2012: Building your GIAC exam readiness

According to the GIAC, the GISF track can bridge the gap that exists between managers and system administrators. GISF candidates are expected to demonstrate key concepts of information security which include understanding the threats and risks to information and information resources, identifying best practices that can be used to protect them, and learning to diversify our protection strategy. Officially, the exam covers: Attacks and Countermeasures Building Security Policies Cryptosystems, cryptography, and algorithms Defense in Depth Designing and Implementing Networks Fundamental Security Concepts Networking and Routing Concepts Risk & Vulnerability Assessment & Management Security as a Process Wireless Technologies On the other hand, the GIAC Certified ISO-27000 Specialist G2700 certification track is for those who are in search of a how-to guide for implementing the ISO-27000 series of standards, in particular the various ISO 27002 security controls and the ISO 27005 Risk Management methods. Simply put, it is a track covering the essential security topics with reference to the ISO standards. We believe that the two tracks share many common topics and it would be beneficial to study for both together. When we develop our material we do not classify topics the official way. In fact, we follow our own flow of instructions which we think is more logical for the overall learning process. Don t worry, it does not hurt to do so, as long as you truly comprehend the material. This ExamFOCUS book focuses on the more difficult topics that will likely make a difference in exam results. The book is NOT intended to guide you through every single official topic. You should therefore use this book together with other reference books for the best possible preparation outcome.