CISSP - Domain 4 - Physical Security

Physical Security is also known as Environmental Security. Perhaps the most underrated domain of CISSP, which in reality is very important, least, in respect to exam preparation. The domain focuses particularly on the threats, vulnerabilities and countermeasures that can be utilized to physically protect an enterprise's resources and sensitive information. The domain also gives a good overview on how to choose a secure site, design, configuration and practical implementation techniques. It is pertinent to know that the most important theme of this domain is protecting people first. The domain also takes into account how to naturally enforce physical security without creating much artificial fuss around -- Crime Prevention Through Environmental Design (CPTED).

CISSP - Domain 3 - Cryptography

Cryptography is thought to be the heart of IT Security. This domains tells us how to keep the confidentiality, integrity and authenticity of sensitive information intact during its lifetime or communication time. The domain discusses symmetric and asymmetric algorithms, how they are used practically and how can they be exploited with different means. How to use digital signatures to provide authenticity and non-repudiation during e-transaction is an important aspect of this domain as well.

CISSP - Domain 2 - Access Controls

Information system mainly comprises of three components Subject (component which accesses), Object (component which is accessed), Access Control (component which controls what objects can be accessed by subjects and importantly to what extent). Security Management Practices and Access Control are important domains to learn strong information security concepts. This domain, as the name suggests, talks more about how to control the access movements of Subject. The domain discusses access control concepts, methodologies and (practical) implementations within centralized and decentralized environments. It also discusses control techniques like personnel, technical, physical and measures likes preventive, detective and corrective.

CISSP - Domain 1 - Information Security Governance and Risk Management

The domain is also known as Security Management Practices -- all the crux of CISSP can be found in this very domain. Security Management Practices starts with the basics of information security. It describes to us what the terms threat, vulnerability, risk, exposure, confidentiality, integrity, availability etc. mean. The domain tells us what is the risk management process, how to carry out risk analysis and risk treatment. The domain gives us an overview to understand what policies, standards, guidelines, procedures and roles associated with information assets are all about. The domain emphasizes that security is management concern and not the IT concern.

What we want and actually need?

Life is spent either by fulfilling your needs or achieving your wants. The difference between want and need can be subtle for some or simply obvious for many. By what rule we live our lives determines what kind of a person we are generally. A person who focuses more on the needs lives more satisfying life than the person who focuses on achieving his wants.

If you are thirsty what you need is a glass of tap water and what you want is a carbonated drink. The sensible choice would be to go for tap water but most of us choose otherwise. If you are looking for a cellular device just for talking with your friends, family and colleagues then what you need is a simple mobile phone and what you want is an IPhone or some other SmartPhone. Whether you spend your money on your need or your want, the choice is all yours.

Want can be called a lavishing or a modernized need. The need and want of a common person in the developed country like US would be different from an average person living in the under-developed country like Somalia. Pizza, Rice, Chicken and Dessert is what you want for dinner while someone in different continent needs a small piece of bread to fulfill his hunger. Most of the marketing and branding strategies focus on making their product our want and then making our want our need.

The schools teach us complex mathematical techniques to uncover the hidden but they forget teaching us simple rules to live our lives with. Living by your needs or by your wants can change your life. Think about it! :)

Tips From The Holy Quran

Respect and honor all human beings irrespective of their religion, color, race, sex, language, status, property, birth, profession/job and so on [17/70]

Talk straight, to the point, without any ambiguity or deception [33/70]

Choose best words to speak and say them in the best possible way [17/53, 2/83]

Do not shout. Speak politely keeping your voice low. [31/19]

Always speak the truth. Shun words that are deceitful and ostentatious [22/30]

Do not confound truth with falsehood [2/42]

Say with your mouth what is in your heart [3/167]

Speak in a civilized manner in a language that is recognized by the society and is commonly used [4/5]

When you voice an opinion, be just, even if it is against a relative [6/152]

Do not be a bragging boaster [31/18]

Do not talk, listen or do anything vain [23/3, 28/55]

Do not participate in any paltry. If you pass near a futile play, then pass by with dignity [25/72]

Do not verge upon any immodesty or lewdness whether surreptitious or overt [6/151]

If, unintentionally, any misconduct occurs by you, then correct yourself expeditiously [3/134]

Do not be contemptuous or arrogant with people [31/18]

Do not walk haughtily or with conceit [17/37, 31/18]

Be moderate in thy pace [31/19]

Walk with humility and sedateness [25/63]

Keep your gazes lowered devoid of any lecherous leers and salacious stares [24/30-31, 40/19]

If you do not have complete knowledge about anything, better keep your mouth shut. You might think that speaking about something without full knowledge is a trivial matter. But it might have grave consequences [24/15-16]

When you hear something malicious about someone, keep a favorable view about him/her until you attain full knowledge about the matter. Consider others innocent until they are proven guilty with solid and truthful evidence [24/12-13]

Ascertain the truth of any news, lest you smite someone in ignorance and afterwards repent of what you did [49/6]

Do not follow blindly any information of which you have no direct knowledge. (Using your faculties of perception and conception) you must verify it for yourself. In the Court of your Lord, you will be held accountable for your hearing, sight, and the faculty of reasoning [17/36]

Never think that you have reached the final stage of knowledge and nobody knows more than yourself. Remember! Above everyone endowed with knowledge is another endowed with more knowledge [12/76]

Even the Prophet [p.b.u.h] was asked to keep praying, "O My Sustainer! Advance me in knowledge." [20/114]

The believers are but a single Brotherhood. Live like members of one family, brothers and sisters unto one another [49/10]

Do not make mockery of others or ridicule others [49/11]

Do not defame others [49/11]

Do not insult others by nicknames [49/11]

Avoid suspicion and guesswork. Suspicion and guesswork might deplete your communal energy [49/12]

Spy not upon one another [49/12]

Do not backbite one another [49/12]

When you meet each other, offer good wishes and blessings for safety. One who conveys to you a message of safety and security and also when a courteous greeting is offered to you, meet it with a greeting still more courteous or (at least) of equal courtesy [4/86]

When you enter your own home or the home of somebody else, compliment the inmates [24/61]

Do not enter houses other than your own until you have sought permission; and then greet the inmates and wish them a life of blessing, purity and pleasure [24/27]

Treat kindly -Your parents - Relatives - The orphans - And those who have been left alone in the society [4/36]

Take care of - The needy - The disabled - Those whose hard earned income is insufficient to meet their needs - And those whose businesses have stalled – And those who have lost their jobs [4/36]

Treat kindly -Your related neighbors, and unrelated neighbors - Companions by your side in public gatherings, or public transportation [4/36]

Be generous to the needy wayfarer, the homeless son of the street, and the one who reaches you in a destitute condition [4/36]

Be nice to people who work under your care. [4/36]

Do not follow up what you have given to others to afflict them with reminders of your generosity [2/262]

Do not expect a return for your good behavior, not even thanks [76/9]

Cooperate with one another in good deeds and do not cooperate with others in evil and bad matters [5/2]

Do no try to impress people on account of self-proclaimed virtues [53/32]

You should enjoin right conduct on others but mend your own ways first. Actions speak louder than words. You must first practice good deeds yourself, then preach [2/44]

Correct yourself and your families first [before trying to correct others] [66/6]

Pardon gracefully if anyone among you who commits a bad deed out of ignorance, and then repents and amends [6/54, 3/134]

Divert and sublimate your anger and potentially virulent emotions to creative energy, and become a source of tranquility and comfort to people [3/134]

Call people to the Way of your Lord with wisdom and beautiful exhortation. Reason with them most decently [16/125]

Leave to themselves those who do not give any importance to the Divine code and have adopted and consider it as mere play and amusement [6/70]

Sit not in the company of those who ridicule Divine Law unless they engage in some other conversation [4/140]

Do not be jealous of those who are blessed [4/54]

In your collective life, make rooms for others [58/11]

When invited to dine, Go at the appointed time. Do not arrive too early to wait for the preparation of meal or linger after eating to engage in bootless babble. Such things may cause inconvenience to the host [33/53]

Eat and drink [what is lawful] in moderation [7/31]

Do not squander your wealth senselessly [17/26]

Fulfill your promises and commitments [17/34]

Keep yourself clean, pure [9/108, 4/43, 5/6]

Dress-up in agreeable attire and adorn yourself with exquisite character from inside out [7/26]

Seek your provision only by fair endeavor [29/17, 2/188]

Do not devour the wealth and property of others unjustly, nor bribe the officials or the judges to deprive others of their possessions [2/188]

Note: The above points are some of the lessons learnt from Quran that apply to our general living. The verse(s) of Quran from which the lesson is drawn is given. The points above may not be word by word translations of Quranic verses. May Allah keep us all under His protection and guidance and enable us to read, understand and follow the Quran. Amen!

Being Exceptional

Saying the big words is easy but actually being sensible enough to follow them is quite demanding. A lot of professionals talk big but seldom are big achievers. The chief reason being they are not good enough in their respective professions; it is as simple as that. A professional is someone who performs the assigned work efficiently irrespective of good or bad times.

Lot of us are not professionals but just people doing work; we are not sincere with our professions. All of us have one thing in common that we want to earn huge sum of money but we seldom try to be good in what we do -- our work, our profession. It is pertinent to note that what we do is actually going to help us achieve our long term goals and the mere short term goal of feeding us. Why not be good in what we do? Why not be outstanding in what we do? Why remain mediocre when we can be exceptional in what we do?

Excellence in our work shows how much pleasure we take in doing it and opposite holds true as well. The degrees we have and the institutes we have studied become irrelevant if we are average in what we ought to be best at. It is quite disheartening to see there are very few good barbers, tailors, shoemakers, welders, technicians, scientists, engineers, doctors, politicians. It is time that we stop mourning about our lives and start being exceptional in what we do. :)