Operations Security

The Operations Security domain encompasses the controls over hardware, media, and operators with access privileges to resources, including monitoring and auditing.

This domain is covered in Chapter 10. Major topics include

• Administrative management

• Security concepts

• Control types

• Operations controls

• Resource protection

• Auditing and audit trails

• Monitoring tools and techniques

• Intrusion detection

• Penetration testing

• Inappropriate activities

• Threats and countermeasures

• Violations, breaches, and reporting