Validating that a control works rather than exists - SkilBrill

Skip to content

Home
Courses
About
Contact
Blog
- Freshers

Search for:

Home - Lessons - CISSP Certification Training (ISC²) - M6 — Domain 6: Security Assessment and Testing - Validating that a control works rather than exists

CISSP Certification Training (ISC²) Validating that a control works rather than exists

CISSP Certification Training (ISC²)

0% Completed

M1 — Domain 1: Security and Risk Management

Confidentiality, integrity and availability as competing demands

Security governance: policies, standards, procedures and guidelines

Regulatory, contractual and legal issues, including DPDP for India

Risk: identification, analysis, treatment, transfer and acceptance

Professional ethics and why ISC² scores it separately

Business continuity principles and the risk register

M2 — Domain 2: Asset Security

Data ownership, stewardship, custodianship and controllership

Classification schemes and the handling rules they trigger

Data lifecycle: creation through to destruction and disposition

Scoping and tailoring a control set to the actual environment

Retention, crypto-shredding and defensible deletion

Asset inventory as a control rather than a spreadsheet

M3 — Domain 3: Security Architecture and Engineering

Security models: Bell-LaPadula, Biba, Clark-Wilson and their intent

Vulnerabilities of the OS, firmware and hardware security features

Cryptography in depth: symmetric, asymmetric, hashing and PKI

Site and facility design: the physical security layer

Vulnerability assessment of a designed architecture

Selected and engineered controls versus default ones

M4 — Domain 4: Communication and Network Security

OSI and TCP/IP models as an incident debugging tool

Secure protocols, and which of the familiar ones are not

Network attacks: on-path, DNS, ARP, DoS and their mitigations

Segmentation, zero trust and micro-segmentation as design choices

Secure communications across cloud, on-premise and remote access

Mobile and IoT connectivity and their weaker edges

M5 — Domain 5: Identity and Access Management

Identification, authentication and authorization as distinct steps

Authentication factors, federation and single sign-on patterns

Authorization models: RBAC, ABAC, rule-based and MAC

Privileged access management and just-in-time elevation

Identity lifecycle: joiner, mover, leaver and orphaned accounts

Access review, attestation and the evidence an auditor wants

M6 — Domain 6: Security Assessment and Testing

Internal, external and third-party assessment types

Vulnerability scanning versus penetration testing and scope

Audit process, findings classification and remediation tracking

Security control testing: penetration, synthetic and log review

Validating that a control works rather than exists

Reporting findings so that they are acted on

M7 — Domain 7: Security Operations

Investigations: evidence, chain of custody and interview discipline

Incident response lifecycle and resource management

Logging, monitoring and the detection that survives scrutiny

Patch, vulnerability and change management in a live estate

Resource availability: resilience, redundancy and failover

Database and application security in operation

M8 — Domain 8: Security in the Software Development Lifecycle

Security in requirements, design, code, test and deployment

Maturity models and what they actually measure

Secure coding practices and the failure classes that recur

Database application security, ORM and injection defence

Third-party libraries, software supply chain and SBOMs

Assessment methods: code review, SAST, DAST and threat modelling

Announcements Course Info

Global Trusted Software Training Partner Since 2022

SkilBrill Training Institute delivers industry-focused technology education that bridges the gap between academic learning and real-world demands. Our structured programs combine foundational theory with practical application, ensuring every graduate is confident and job-ready from day one.

Learn More About Us

© 2026 SkilBrill Training Institute. All Rights Reserved. Privacy Policy Terms Refunds Outcomes

📞 Enroll Now

Start Your Journey

Fill in your details and our team will get back to you within 24 hours

Please enable JavaScript in your browser to complete this form.

Full Name *

Email *

Course Interested In *

Mode of Course *