Welcome to CISSP training Certified Information Systems Security Professional
Search
Nickname Password Security Code Security Code Type Security Code  
You are certified but are your qualified?  Become qualified today.

Shon Harris Training

ISO 17799/ISO 27001

Surveys

Where do you find the best price for books?

Amazon.Com
Bookpool.Com
The ISC2 webstore
CISSPS.COM
Cheapbooks.com
Ecampus.com
Other (Please leave a comment with name of site)



Results
Polls

Votes: 780
Comments: 27

Who's Online

There are currently, 62 guest(s) and 25 member(s) that are online.

You are Anonymous user. You can register for free by clicking here
Clement and Nathalie are proud to Welcome you to the CCCure.Org web site!

The companies listed below are long term sponsors or supporters of CCCure.
Their support allow us to keep the site up and running for FREE.

 


Core Impact your compliance best friend
Home of CORE Impact
Click Here to visit.
Security University Top 8570 Training for all
List of Classes
Register for a class
Top Training for Top Results, delivered by Shon Harris
List of Classes
Register for a class
Simply the best intructors and the best training!!!
List of Classes
Register for a class
Simply the best security services!!!
Service Offering
About Secure Anchor

On this site you will find resources to help you prepare and study for the
CISSP, SSCP, CAP, ISSEP, CISM, CISA, ISSPCS, SANS GIAC GCFW certification.

Clement & Nathalie
Click Here to contact us

If you see this message, it means you are an anonymous visitor

IMPORTANT:  USAGE AGREEMENT (Read before you join)

This web site is offering free security education resources to help you expand your knowledge and skills or simply to reach some of your certification goals.

As an anonymous user on this web site there is very little you have access to. Registration will give you extra benefits and also allow you to access content such as our huge download section, our study guides, our quiz engine, our exam crams, our web links, and our forums to name only a few.

Leechers are definitively NOT welcome

In computing and specifically on this portal, being a leech or leecher refers to the practice of benefiting, usually deliberately, from others' information or effort but not offering anything in return, or only token offerings in an attempt to avoid being called a leech.  Do take the time to contribute articles, powerpoint slide show, study guides, videos, quiz questions, news, downloads, links, forum posting, etc...   If worst come to the worst and you do not have any free time to contribute, a donation is always appreciated as our operational expenses need to be paid on a monthly basis and money allow us to hire people to review and develop new content.

Usage Agreement (Please read, if you do not agree, do not join)

By registering on this web site you give implicit permission and authorize CCCure.Org to send you advertising messages from our sponsors. The messages sent are for products or services that are security oriented.  We will NOT send messages about male enhancement or other types of get rich/bigger scams or similar products and services. The messages from our sponsors are sent only a few times a month and your email address is NEVER given or resold to anyone else.  We will pass the message on behalf of our sponsors but they never get access to your email address.

The web site is self supported through donations and advertising from our sponsors. Donations alone are totally ineffective and our yearly donations do not even pay for a month of hosting and bandwidth fees. We must rely on our sponsors to survive. This is why we have such a policy in place. The final benefit to you the members and visitors of the web site is: FREE ACCESS

Forcing registration also ensures that we minimize the amount of junk that unscrupulous users attempt to post within our message area, comments, web links, download areas, forums, or any other place where they can post their unsolicited and unwanted messages. The greatest benefit of all is the fact that registration helps us in maintaining quality content.

Once you are registered and logged in, you will no longer see this message and new menus and options will be available to you as a registered member.

If you do not agree with the policy above, please do not register.  By registering you implicitly consent to our usage policy state above.


Best regards

Clement and Nathalie
Site Maintainers


Great (FREE) tutorials on the ten domains of the CISSP by Veridion
Posted by boss on Sunday, August 17 @ 19:52:48 EDT (354 reads)
Topic Veridion

cdupuis writes "

Today I am very happy to introduce ten tutorials that were contributed by Veridion.

You can access the tutorials for each of the ten domains of the CBK by using the links below:

1.  INFORMATION SECURITY AND RISK MANAGEMENT

2.  ACCESS CONTROL

3. SECURITY ARCHITECTURE AND DESIGN

4. APPLICATION SECURITY

5. CRYPTOGRAPHY

6. BUSINESS CONTINUITY PLANNING AND DISASTER RECOVERY

7. TELECOMMUNICATION AND NETWORK SECURITY

8. LEGAL, REGULATIONS, COMPLIANCE, AND INVESTIGATIONS

9. OPERATION SECURITY

10. PHYSICAL (ENVIRONMENTAL) SECURITY

They are really great, they contain quizzes to validate if you did or did not understand each of the sub-topics as you move along within each of the domains of the CBK.

 

Enjoy!

Clement

"

(Read More... | 3 comments | Score: 4.75)


Why Leaders Should Care About Security (podcast)
Posted by boss on Friday, August 08 @ 10:07:36 EDT (197 reads)
Topic CISSP OSG INFO

cdupuis writes "

NOTE FROM CLEMENT:

The message above was posted on my friend Dan Swanson on his mailing list.   If you wish to subscribe simply click on the subscribe link:   Subscribe

Under the URL http://www.cert.org/podcast/  you will find a large collection of podcast that are extremely interesting.  Do take a look and start racking up some CPE's.  All of this is available for FREE, that the price I wish to pay for my CPE's.

Here is the message:

This podcast is intended to motivate leaders to pay attention to enterprise and information security, and the risks of not doing so. It introduces two landmark examples of organizations that did not treat adequate security as a high priority. It places security in a governance context and introduces how security can be viewed as a competitive advantage.

It discusses creating a culture of security, demonstrating duty of care, and determining who is ultimately responsible for security. It provides some next steps for taking action.

http://www.cert.org/podcast/show/leaders.html

Enjoy

Dan

"

(comments? | Score: 0)


NoticeBored latest newsletter on governance
Posted by boss on Thursday, July 31 @ 10:17:09 EDT (260 reads)
Topic Awareness Info

cdupuis writes "

 

NoticeBored dot com Information security awareness newsletter
Click the poster thumbnail to see what we are providing to customers in this module
August 2008 - information security governance
Dear Clement,

The field of corporate governance exploded onto management’s agenda following Enron’s collapse in 2000/2001 and the introduction of SOX (Sarbanes Oxley Act) in 2002. There has been some public discussion of IT governance since then but information security governance is still emerging from the murk.

This month we expand on what ‘governance’ means and how it relates to information security in particular. It affects our target audiences (staff, managers and IT professionals) differently so we explain the implications in practical terms, covering the essential elements that everyone should comprehend.

You may have seen the recent news about the arrest of a network administrator in San Francisco. As reported, the accused was solely responsible for designing, operating and securing the city government’s network. He allegedly refused to disclose the network admin passwords at first, preventing others from managing the network in his absence. While it’s far too early to determine whether there is any truth behind the allegations, the story has fascinating governance implications that find their way into one of the case studies and the newsletter.

Kind regards,
Gary Hinson
CEO, IsecT Ltd.
Download the newsletter (~148kb PDF)
Copyright © 2008 IsecT Ltd. Information in the newsletter is provided free, for information only and 'as is'. Whilst believed correct, it is in no way comprehensive. It is provided for interest only and is not intended to be relied upon as formal advice. No liability is accepted for any errors or for any losses that may be incurred if any such information is relied upon. You may freely distribute the PDF version of the newsletter intact (including the copyright notice and attribition) but please let us know if you intend to post it on the web.  Find out more about NoticeBored here.





"

(comments? | Score: 0)


C&A Position Available at Siemens
Posted by boss on Tuesday, July 29 @ 07:36:19 EDT (291 reads)
Topic JOBS

cdupuis writes "

Company Description

Siemens Government Services, Inc. is a specially created and highly qualified company focused on doing work for the U.S. Government to improve our nation's security.

Incorporated in 2000 as an independent US company with its own Board of Directors, SGS has a unique relationship with Siemens AG/Siemens USA and is able to integrate a broad range of innovative Siemens' products, systems, and services in performing work for the U.S. Government. Siemens AG is a recognized global leader in electronics, electrical equipment, technical solutions, and research and development. Siemens USA employs 70,000 people in the US and has facilities in all 50 states.

The future of SGS is bright - by integrating world-class people, process, products, and technology, SGS is expanding its role in helping to provide for our nation's security.

We offer a highly competitive compensation and benefits package along with the unique opportunity to grow your career with a company you can trust.

Job Description

Siemens Government Services (SGS) is a dynamic and rapidly growing organization. We are seeking a self-driven individual to complement our growing team.

Responsibilities include:
• Perform duties relating to systems and infrastructure certification and accreditation (C&A).
• Development and completion of System Security Authorization Agreements (SSAA's) and Systems Security Plans (SSP's).
• Analyze information security systems and applications and recommend and develop security measures to protect information against unauthorized modification or loss. Oversee C&A projects from inception to the continuous monitoring phase.
• Work with project teams to accredit systems and maintain government accreditation. Lead and assist in the writing development of C&A packages.

Requirements include:


• 3-5 years working in various Certification and Accreditation-related roles.
• 8+ years in the Information Technology and/or Information Security fields.
• Experience in DoD certifications and accreditations such as IA/DIACAP series and regulations and DHS Management Directives.
• Experience securing data, writing risk assessment reports and security procedures, cyber security management, backup and recovery process, disaster recovery procedures and implementation of site audits and security requirements.
• Thorough understanding of NIST, FISMA, FIPS and DHS information security policies.
• CISSP, CISM, CISA and/or CAP certifications a plus
• Must be willing to complete ISC2 Certification and Accreditation Professional (CAP) exam within six months of hiring
• Must be willing to travel up to 20%
• Must be US citizen and will be subject to a government security investigation and must meet eligibility requirements for access to classified information. 

For more information contact:  infosec@siemensgovt.com

"

(comments? | Score: 0)


Randy Pausch, Known for his "Last Lecture," Dies
Posted by boss on Friday, July 25 @ 20:41:24 EDT (332 reads)
Topic CISSP OSG INFO

cdupuis writes "

 

NOTE FROM CLEMENT:
I usually do not write articles that are out of topics. But his story and the presentation of Mr. Paush has really touched me in a very special way. His presentation was so full of truth about our values and life that I listened to it a few times. If you have NOT listened to it, I would recommend very strongly you do so.

The lecture is at: http://www.youtube.com/watch?v=ji5_MqicxSo

BELOW YOU HAVE THE SAD NEWS THAT HE PASSED AWAY:

Top News July 25, 2008, 1:30PM EST
Randy Pausch, Known for his "Last Lecture," Dies
Randy Pausch's final talk at Carnegie Mellon, in which he celebrates having fulfilled his childhood dreams, was an international sensation
By RAMIT PLUSHNICK-MASTI

Associated Press Writer

PITTSBURGH (AP) - Randy Pausch, the Carnegie Mellon University computer scientist whose "last lecture" about facing terminal cancer became an Internet sensation and the basis of a best-selling book, died Friday. He was 47.

Pausch died at his home in Chesapeake, Va., said Jeffrey Zaslow, a Wall Street Journal writer who co-wrote Pausch's book. Pausch and his family had moved there last fall to be closer to his wife's relatives.

Pausch was diagnosed with incurable pancreatic cancer in September 2006. His popular last lecture at Carnegie Mellon in September 2007 garnered international attention and was viewed by millions on the
Internet.

In it, Pausch celebrated living the life he had always dreamed of instead of concentrating on his impending death.

See full article at:
http://www.businessweek.com/print/bwdaily/dnflash/content/jul2008/db20080725_243087.htm
"

(Read More... | 2 comments | Score: 0)


Login here

Nickname

Password

Security Code:
Security Code
Type Security Code

Don't have an account yet? You can create one. As a registered user you have some advantages like theme manager, comments configuration and post comments with your name.

Our Sponsors

The best security training in the world

CCCure Supporters

_SP_SUPPORTEDBY

The PST

The Academy

ChicagoCon

[ _SP_BESUPPORTER ]
[ _SP_TITLE ]

Random Headlines

Today's Big Story

There isn't a Biggest Story for Today, yet.

Most Active Members

· 1: side_winder
Total points: 10577
· 2: Lopezco
Total points: 8401
· 3: cissp_newbie
Total points: 7580
· 4: cdupuis
Total points: 5431
· 5: mikeyoung_fla
Total points: 5162
· 6: Vladimir
Total points: 4597
· 7: MMM
Total points: 2969
· 8: vijayu
Total points: 1859
· 9: Deepakseth
Total points: 1714
· 10: NMS
Total points: 1225

All logos and trademarks in this site are property of their respective owner.
The comments are property of their posters, all the rest © 2007 by CCCure.Org, and the site maintainers Clement Dupuis and Nathalie Lambert. Reuse is strictly prohibited without written permission of CCCure.Org or it's maintainers.
 
This web site is not associated directly or indirectly with ISC2, the SANS Institute, ISACA, or other certification authority. The GCFW, CISSP, SSCP, ISSEP, ISSMP, CISA, and CISM are all the property of their respecful owners. The content of this site is provided to you freely due to the generosity of our sponsors.
Page Generation: 0.38 Seconds