1.0 Planning and Scoping

• 1.1 Explain the importance of planning for an
  engagement
• 1.2 Explain key legal concepts
• 1.3 Explain the importance of scoping an engagement properly
• 1.4 Explain the key aspects of compliance-based assessments

3.0 Attacks and Exploits

• 3.1 Compare and contrast social engineering attacks
• 3.2 Given a scenario, exploit network-based vulnerabilities
• 3.3 Given a scenario, exploit wireless and RF-based vulnerabilities
• 3.4 Given a scenario, exploit application-based vulnerabilities
• 3.5 Given a scenario, exploit local host vulnerabilities.
• 3.6 Summarize physical security attacks related to facilities
• 3.7 Given a scenario, perform post-exploitation techniques

5.0 Reporting and Communication

• 5.1 Given a scenario, use report writing and handling best practices
• 5.2 Explain post-report delivery activities
• 5.3 Given a scenario, recommend mitigation strategies for discovered vulnerabilities
• 5.4 Explain the importance of communication during the penetration testing process

1.0 Threat Management

1.1 Given a scenario, apply environmental reconnaissance techniques using appropriate tools and processes.

• Procedures/common tasks
• Variables
• Tools

1.3 Given a network-based threat, implement or recommend the appropriate response and countermeasure.

• Network segmentation
• Honeypot
• Endpoint security
• Group policies
• ACLs
• Hardening
• Network Access Control (NAC)

2.0 Vulnerability Management

2.1 Given a scenario, implement an information
security vulnerability management process.

• Identification of requirements
• Establish scanning frequency
• Configure tools to perform scans according to specification
• Execute scanning
• Generate reports
• Remediation
• Ongoing scanning and continuous monitoring

2.3 Compare and contrast common vulnerabilities found in the following targets within an organization.

• Servers
• Endpoints
• Network infrastructure
• Network appliances
• Virtual infrastructure
• Mobile devices
• Interconnected networks
• Virtual private networks (VPNs)
• Industrial Control Systems (ICSs)
• SCADA devices

3.2 Given a scenario, prepare a toolkit and use appropriate forensics tools during an investigation.

• Forensics kit
• Forensic investigation suite

3.4 Given a scenario, analyze common symptoms to select the best course of action to support incident response.

• Common network-related symptoms
• Common host-related symptoms
• Common application-related symptoms

4.0 Security Architecture and Tool Sets

4.1 Explain the relationship between frameworks, common policies, controls, and procedures.

• Regulatory compliance
• Frameworks
• Policies
• Controls
• Procedures
• Verifications and quality control

4.4 Given a scenario, use application security best practices while
participating in the Software Development Life Cycle (SDLC).

• Best practices during software development frameworks
• Secure coding best practices

• Identify the Importance of IT Governance & Risk Management
• Assess Risk
• Mitigate Risk
• Integrate Documentation into Risk Management

• Determine Industry Trends and Their Effects on the Enterprise
• Analyze Scenarios to Secure the Enterprise

• Select Cryptographic Techniques
• Implement Cryptography

• Implement Mobile Device Management
• Address Security & Privacy Concerns for Mobile Devices

• Implement Security throughout the Technology Lifecycle
• Identify General Application Vulnerabilities
• Identify Web Application Vulnerabilities
• Implement Application Security Controls

• Select Security Assessment Methods
• Perform Security Assessments with Appropriate Tools