CASP – Preparing for Security Engineering and Cryptography Domain

This certification qualifies you to assess cyber readiness within an enterprise. You will be able to design and implement the proper solutions to ensure the organization is ready for the next attack. You will have the knowledge and skills required to do the following
The Security Engineering and Cryptography Domain is about applying security practices to cloud, on-premises, endpoint, and mobile infrastructure, while considering cryptographic technologies and techniques
This course in the CASP series covers the following topics
Engineering and Cryptography
Apply secure configurations to enterprise mobility
Managed configurations
Deployment scenarios
Security considerations
Configure and implement endpoint security controls
Hardening techniques
Processes
Mandatory access control
Trustworthy computing
Compensating controls
Explain security considerations impacting specific sectors and operational technologies
Embedded
ICS/supervisory control and data acquisition
Protocols
Sectors
Explain how cloud technology adoption impacts organizational security
Automation and orchestration
Encryption configuration
Logs
Monitoring configurations
Key ownership and location
Key life-cycle management
Backup and recovery methods
Infrastructure versus serverless computing
Application virtualization
Software-defined networking
Misconfigurations
Collaboration tools
Storage configurations
Cloud access security broker
Given a business requirement, implement appropriate Public key infrastructure solution
Public key infrastructure hierarchy
Certificate types
Certificate usages/profiles/templates
Extensions
Trusted providers
Trust model
Cross-certification
Configure profiles
Life-cycle management
Public and private keys
Digital signature
Certificate pinning
Certificate stapling
Certificate signing requests
Online Certificate Status Protocol versus certificate revocation list
HTTP Strict Transport Security
Given a business requirement, implement appropriate cryptographic protocols and algorithms
Hashing
Symmetric algorithms
Symetric Complexity Contruction
Asymmetric algorithms
Protocols
Elliptic curve cryptography
Forward secrecy
Authenticated encryption with associated data
Key stretching
Troubleshoot issues with cryptographic implementations
Implementation and configuration issues
Keys