Life is important?

Why is money a priority in our lives? Why are the things bought from money important to us than our relations? Surely you can give me hundreds of reasons for these two questions but that would simply show your materialistic approach towards life. Do you think what you buy from money is important in any way than your life? 

On one particular day I witnessed a car accident. Definitely a horrible thing to happen to anyone. But what happened after the accident was more horrible than the accident itself. You may ask why? Well instead of thanking the stars that we are safe the accidentees started abusing each other for the loss that each incurred the other. Whoa! I wonder if they would have done the same after losing two three limbs and going unconscious or to the extreme if had reached the package expiration date. Why we start giving importance to unimportant things and do not see the obvious?

CISSP - Domain 10 - Operations Security

Operations Security relates security aspect in day to day activities of a business enterprise. The domain discusses all the questions regarding: How to keep the data at rest secure? How to securely destroy the data? What privileges need to be assigned and to whom and when? How to protect the hardware (maintenance) and software (piracy)? And how to carry out patch management, problem management, incident management etc.? The important access control concepts  like least privilege and need to know are also discussed along with mechanisms to facilitate and perform audit and monitoring. It can be said that Operations Security is basically the concise combination of all of the other domains of CISSP.

CISSP - Domain 9 - Application Development Security

Security Architecture domain focused on securing systems part while Application Security domain focuses on securing software and applications from their development phase to implementation phase to maintenance phases. The domain highlights that security should be the component of every cycle of Software Development Life Cycle (SDLC). Applications include agents, applets, software, databases, data warehouses, knowledge-based systems. The domain discusses concepts like data mining, data ware-housing, intelligent systems and elaborates on what application controls are needed to ensure confidentiality, integrity and availability of information system. The domain also touches on concepts of penetration testing with regards to applications.

CISSP - Domain 8 - Business Continuity and Disaster Recovery Planning

You may wonder, what business continuity and disaster recovery planning has to do with Information Security? We can have a pretty long discussion on this but to cut the story short the answer is in C-I-A triad. Plus Information Security acts a support system for business to keep going in any condition. The domain focuses on best practices for safeguarding critical information systems; their continuity and recovery procedures. How to manage an incident? How to perform business during and after an incident? How to recover from an incident and get back to the norm? All this is discussed in detail in this domain. While preparing for the exam, do not forget to differentiate between business continuity and disaster recovery.  

CISSP - Domain 7 - Telecommunications and Network Security

Telecommunications and Network Security is the lengthiest domain of CISSP. It emphasizes the concepts of networking -- OSI and TCP / IP models -- explaining each layer in detail; highlighting the technologies and their implementation. The domain discusses the following main concepts:

Physical: Network Topologies, Transmission Media, Communication Technology, Attacks
Data-Link: Technology, Encryption, Risks and Attacks
Network: WAN Technologies, Tunneling, Risks and Attacks
Transport: Technology, DoS Attacks, Remediation
Session: Technology and Implementation, Directory Services, Access Services
Presentation: Concepts, Technology and Implementations, Encryption
Application: Technologies, Data Exchange Services, Administrative Services

The domain also discusses different types of Firewalls and their architectures in detail. Different security protocols and methodologies like PGP, IPSec, SSL (VPN) etc. are also discussed in Network Security portion of the domain. Telecommunications and Network Security domain keeps on evolving with latest technologies arising and gives an overview of them as well, for example, Unified Threat Management.

CISSP - Domain 6 - Legal, Regulations, Compliance and Investigations

The domain gives an overview on laws and regulations associated with digital world. It sheds light on means, opportunities and methods associated with e-crimes. The domain gives account of digital forensics, evidence gathering, chain of custody, incident response, legal liabilities and ways to address compliance. Legal, Regulations, Compliance and Investigations is a very important domain with content that keeps on evolving. A lot of general questions are usually asked from the field of digital forensics (this domain) and penetration testing (application and network security domains) in the exam.

CISSP - Domain 5 - Security Architecture and Design

Security Architecture and Design domain specially focuses on how to create a secure and well-defined system. The domain highlights concepts, principles, structures and standards used to design, implement, monitor and secure operating systems, equipment, networks, applications and controls used to enforce various levels of confidentiality, integrity and availability. The domain also explains different security models in terms of information flow, confidentiality and integrity.