-: In this section of the course, 2 2
we're going to cover non-technical data and privacy controls 3 3
by returning to Domain 1, Security Operations 4 4
and Domain 2, Vulnerability Management 5 5
specifically focusing on objectives 1.1 and 2.5. 6 6
Now, objective 1.1 states 7 7
that you must be able to explain the importance of system 8 8
and network architecture concepts in security operations. 9 9
And objective 2.5 states 10 10
that you must be able to explain concepts related 11 11
to vulnerability response, handling and management. 12 12
Now, if you've taken the time to look 13 13
at the objectives provided by CompTIA, 14 14
you may be wondering why am I linking this section 15 15
to these two objectives? 16 16
Because the terms data classification, data types, 17 17
legal requirements 18 18
and many others are not distinctly listed 19 19
within the sub bullets underneath these objectives. 20 20
But that doesn't mean that they're not going to show up 21 21
on exam day. 22 22
If you look at the bottom 23 23
of page two of the objectives PDF provided by CompTIA, 24 24
you're going to see the following statement. 25 25
Quote, "The list of examples provided 26 26
in bulleted formats are not exhaustive lists. 27 27
Other examples of technologies, processes or tasks pertain 28 28
to each objective may also be included on the exam 29 29
although not listed or covered in this objectives document." 30 30
End of quote. 31 31
Now, this is why we are talking 32 32
about these non-technical data and privacy controls 33 33
in this section of the course under objectives 1.1 and 2.5. 34 34
Because these terms and concepts do link directly back 35 35
to these tasks listed underneath the objectives that state 36 36
that you must explain the importance of system 37 37
and network architecture concepts in security operations 38 38
and to be able to explain concepts related 39 39
to vulnerability response, handling and management. 40 40
So even though these concepts aren't clearly listed out 41 41
as sub bullets underneath the objectives here, trust me, 42 42
they are things that the exam will ask you about. 43 43
And they actually used to be listed 44 44
out directly underneath these different objectives 45 45
in older versions of the exams. 46 46
And I can tell you I have seen these types 47 47
of questions still being asked in the latest version 48 48
of the CySA+ exam 49 49
which is why we're going to include them here to ensure 50 50
that you understand how to answer these questions. 51 51
And we do that by linking them to these two objectives. 52 52
So as we move through this section, 53 53
we're going to start out by discussing the different types 54 54
of data classification that's being used 55 55
within different organizations. 56 56
Then we'll discuss the different types 57 57
of data that's used in organizations 58 58
and the various legal requirements 59 59
that affect our data systems. 60 60
Next, we'll discuss the policies 61 61
for processing personal data within an organization 62 62
as well as discussing data retention standards 63 63
and the secure disposal of data 64 64
when it's no longer needed by your organization. 65 65
Then we're going to talk about data ownership, 66 66
data sharing and privacy agreements that are going to be used 67 67
by different organizations around the globe. 68 68
And finally, we're going to take a short quiz 69 69
to see what you learned during this section of the course 70 70
and review those quiz questions fully 71 71
to ensure you can explain 72 72
why the correct answers were correct. 73 73
So let's start diving through all the different types 74 74
of non-technical data 75 75
and privacy controls that you're going to experience 76 76
in this section of the course.