Testing security controls and responding to incidents

This lesson is part of the full course.

In it you will learn to:

• Perform procedures to understand a security awareness training program
• Document issues, findings and recommendations for a security assessment report
• Compare a walkthrough of IT security procedures with the documented policy
• Detect deficiencies and deviations in security controls in a SOC 2
• Recall the difference between security events and incidents, and explain incident response plans and cyber insurance
• Test whether an entity responded to incidents in accordance with its plan