ű״ ¶ç¾î¾²±â°¡ ¹«½ÃµÇ¸ç, 2°³ ÀÌ»ó ÀÔ·Â ½Ã ÅÂ±×¿Í Å±״ ½°Ç¥(,)·Î ±¸ºÐÇÕ´Ï´Ù.
ÇÑ Å±×ÀÇ ÃÖ´ë ±ÛÀÚ¼ö´Â 10±ÛÀÚÀ̸ç, º»ÀÎÀÌ ÀÔ·ÂÇϰųª Âù¼ºÇÑ Å±״ ³ë¶õ»öÀ¸·Î Ç¥±âµË´Ï´Ù.
(ISC)2¿¡¼ Á¤ÀÇÇÑ CBK(Common Body of Knowlege)¿¡ ÃÊÁ¡À» ¸ÂÃá Ã¥À¸·Î CBKÀÇ º¸¾È °ü¸®, ¾ÏÈ£ÇÐ, Àç³ º¹±¸ °èȹ, Åë½Å¸Á º¸¾ÈÀ» Æ÷ÇÔÇÑ ¿ °³ µµ¸ÞÀÎÀ» ÀÚ¼¼ÇÏ°Ô ´Ù·é´Ù. CBK °¢°¢ÀÇ µµ¸ÞÀο¡´Â Áö¿øÀÚ°¡ Á÷Á¢ CISSP ½ÃÇè½Ã ¸¸³ª°Ô µÉ À¯ÇüÀÇ »ùÇà ¿¬½À ¹®Á¦°¡ Á¦°øµÈ´Ù.
´ÙÀ½ ³»¿ëµéÀ» ´Ù·é´Ù.
CBKÀÇ ±âº»ÀûÀÎ ³»¿ëµé
CBK °¢°¢ÀÇ µµ¸ÞÀο¡ °üÇÑ ¿¬½À ¹®Á¦¸¦ Á¤´ä ¹× ÇØ¼³°ú ÇÔ²² Á¦°ø
CISSP ½ÃÇèÀ» À§ÇØ ¾Ë¾Æ¾ß ÇÒ Á¤º¸µé
·¹ÆÛ·±½º½Ä ¾È³»¹× Á» ´õ ¹ßÀüµÈ ÁÖÁ¦µé¿¡ ´ëÇÑ Á¤º¸
Chapter 1 º¸¾È °ü¸® °üÇà(Security Management Practices)
Chapter 2 Á¢±Ù ÅëÁ¦ ½Ã½ºÅÛ(Access Control Systems)
Chapter 3 Åë½Å°ú Åë½Å¸Á º¸¾È(Telecommunications and Network Security)
Chapter 4 ¾ÏÈ£È(Cryptography)
Chapter 5 º¸¾È ¾ÆÅ°ÅØÃ³¿Í ¸ðµ¨(Security Architecture and Models)
Chapter 6 ¿î¿µ º¸¾È(Operations Security)
Chapter 7 ¾ÖÇø®ÄÉÀ̼ǰú ½Ã½ºÅÛ °³¹ß(Applications and Systems Development)
Chapter 8 »ç¾÷ Áö¼Ó °èȹ°ú ÀçÇØ º¹±¸ °èȹ(Business Continuity Planning and Disaster Recovery Planning
Chapter 9 ¹ý, Á¶»ç, À±¸®(Law, Investigation and Ethics)
Chapter 10 ¹°¸®Àû º¸¾È(Physical Security)
ºÎ·Ï
A ¿ë¾îÁ¤ÀÇ¿Í Ãà¾à¾î(Glossary of Terms and Acronyms)
B ·¹Àκ¸¿ì ½Ã¸®Áî(The RAINBOW Series)
C »ùÇà ¹®Á¦ ÇØ´ä(Answers to Sample Questions)
D HIPAA-CMMÀ» ÅëÇØ HIPAA¸¦ ÁؼöÇϱâ À§ÇÑ ÇÁ·Î¼¼½ºÀû Á¢±Ù(A Process Approach to HIPAA Compliance through an HIPAA-CMM.)
E NSA InfoSec Æò°¡ ¹æ¹ý·Ð(The NSA InfoSec Assessment Methodology)
F À±¸®Àû ÇØÅ·(The Case for Ethical Hacking)
G ±¹Á¦ °øÅë Æò°¡ ±âÁØ(The Common Criteria)
H ½ÉÈÇнÀÀ» À§ÇÑ Âü°í(References for Further Study)
Chapter 1 º¸¾È °ü¸® °üÇà(Security Management Practices)
Chapter 2 Á¢±Ù ÅëÁ¦ ½Ã½ºÅÛ(Access Control Systems)
Chapter 3 Åë½Å°ú Åë½Å¸Á º¸¾È(Telecommunications and Network Security)
Chapter 4 ¾ÏÈ£È(Cryptography)
Chapter 5 º¸¾È ¾ÆÅ°ÅØÃ³¿Í ¸ðµ¨(Security Architecture and Models)
Chapter 6 ¿î¿µ º¸¾È(Operations Security)
Chapter 7 ¾ÖÇø®ÄÉÀ̼ǰú ½Ã½ºÅÛ °³¹ß(Applications and Systems Development)
Chapter 8 »ç¾÷ Áö¼Ó °èȹ°ú ÀçÇØ º¹±¸ °èȹ(Business Continuity Planning and Disaster Recovery Planning
Chapter 9 ¹ý, Á¶»ç, À±¸®(Law, Investigation and Ethics)
Chapter 10 ¹°¸®Àû º¸¾È(Physical Security)
ºÎ·Ï
A ¿ë¾îÁ¤ÀÇ¿Í Ãà¾à¾î(Glossary of Terms and Acronyms)
B ·¹Àκ¸¿ì ½Ã¸®Áî(The RAINBOW Series)
C »ùÇà ¹®Á¦ ÇØ´ä(Answers to Sample Questions)
D HIPAA-CMMÀ» ÅëÇØ HIPAA¸¦ ÁؼöÇϱâ À§ÇÑ ÇÁ·Î¼¼½ºÀû Á¢±Ù(A Process Approach to HIPAA Compliance through an HIPAA-CMM.)
E NSA InfoSec Æò°¡ ¹æ¹ý·Ð(The NSA InfoSec Assessment Methodology)
F À±¸®Àû ÇØÅ·(The Case for Ethical Hacking)
G ±¹Á¦ °øÅë Æò°¡ ±âÁØ(The Common Criteria)
H ½ÉÈÇнÀÀ» À§ÇÑ Âü°í(References for Further Study)
I ºê¸®Æ¼½Ã ½ºÅÄ´Ùµå 7799(British Standard 7799)
âÀÛºí·Î±× Àαâ ÃÊû ¿¬ÀçÀÛ
¾Ë¶óµò¿¡¼ ÁÖ¹®ÇϽб¹³»µµ¼ÀÇ ±¸¸Å ±Ý¾×ÀÌ ´Ù¸¥ ÀÎÅͳݼÁ¡(¿¹½º24, ÀÎÅÍÆÄÅ© µµ¼, ÀÎÅÍ³Ý ±³º¸¹®°í)¿¡¼ µ¿ÀÏÇÑ Á¶°ÇÀ¸·Î ÁÖ¹®ÇÑ ±Ý¾×º¸´Ù ºñ½Ò °æ¿ì ±× Â÷¾×¸¸Å ¾Ë¶óµò Àû¸³±ÝÀ¸·Î
º¸»óÇØµå¸®´Â Á¦µµÀÔ´Ï´Ù.
ÃÖÀú°¡ º¸»ó ´ë»ó »óǰÀº "±¹³»µµ¼"ÀÔ´Ï´Ù.
ÀüÁý·ù, ÇØ¿Üµµ¼, À½¹Ý/DVD/ÈÀåǰ/GIFT, ´Ù¸¥ ÀÎÅÍ³Ý ¼Á¡¿¡¼ ÆÇ¸ÅÁßÀÌÁö ¾ÊÀº µµ¼, 1ÀÏ Æ¯°¡ µµ¼(Ư°¡ ÆÇ¸Å À̺¥Æ® ±â°£ÀÌ 1ÀÏ À̳»ÀÎ µµ¼), ´Ù¸¥ ÀÎÅÍ³Ý ¼Á¡¿¡¼ °íÀÇÀûÀ¸·Î ÇöÇà¹ýÀ» À§¹ÝÇÏ´Â ¹«ºÐº°ÇÑ ÇÒÀÎÀ̳ª ¸¶Àϸ®Áö¸¦ Á¦°øÇÏ´Â °æ¿ì µîÀº ÃÖÀú°¡ º¸»ó
´ë»ó¿¡¼ Á¦¿ÜµË´Ï´Ù.
¼ö·É¿¹»óÀÏÀº ÁÖ¹®»óǰÀ» ¹ÞÀ¸½Ç °ÍÀ¸·Î ¿¹»óµÇ´Â ³¯Â¥ÀÔ´Ï´Ù. °áÁ¦(¶Ç´Â ÀԱݿϷá)¸¦ ÇÏ¸é »óǰÁغñ¿Í Ãâ°í°úÁ¤À» °ÅÃÄ ¹è¼Û¾÷ü¸¦ ÅëÇØ ÁÖ¹®»óǰÀ» °í°´´Ô²² Àü´ÞÇÕ´Ï´Ù.
µµ¼ : 1¸¸¿ø ÀÌ»ó ±¸ÀԽà ¹«·á¹è¼Û(¸¸È, ÀâÁö·ù´Â Á¦¿Ü), ÈÀåǰ/À½¹Ý/DVD/¸¸È,ÀâÁö·ù,¾Ë¶óµòÁ÷¹è¼ÛGIFT : 20,000¿ø ÀÌ»ó ±¸ÀԽà ¹«·á¹è¼Û, GIFT(ÆÇ¸ÅÀÚ Á÷¹è¼Û)»óǰÀÇ °æ¿ì ÆÇ¸ÅÀÚÀÇ ¹è¼Û·á ±âÁØ¿¡ µû¶ó Â÷µî(¿¹: 30,000¿ø ÀÌÇÏ ±¸¸Å½Ã ¹è¼Û·á 2,500¿ø)
´Ü, Á¦ÁÖµµ ÅÃ¹è ¹è¼ÛÀÇ °æ¿ì, ÁÖ¹®±Ý¾× ¶Ç´Â ¹«·á¹è¼Û ¿©ºÎ¿¡ °ü°è¾øÀÌ Ç×°ø¹è¼Û·á 2,500¿øÀÌ ºÎ°úµË´Ï´Ù.¶ÇÇÑ ÆÇ¸ÅÀÚ Á÷¹è¼Û Á¦Ç°ÀÇ °æ¿ì, Á¦ÁÖµµ/¹é·Éµµ µî ¹è¼Û·á Ư¼öÁö¿ªÀº º°µµÀÇ ¹è¼Û·á°¡ ºÎ°úµÇ°Å³ª ¹è¼ÛÀÌ ºÒ°¡´ÉÇÏ´Ï, ¹è¼Û·á°¡
ÀϹÝÀûÀÌÁö ¾ÊÀº Áö¿ª¿¡ ¹è¼ÛÄÚÀÚÇϽô °í°´Àº ¹Ì¸® ¹è¼Û·á¿¡ ´ëÇØ »ó´ãÇϽñ⠹ٶø´Ï´Ù.
ÀýÆÇ : Á¦ÀÛÀ» Áß´ÜÇÑ »óǰÀ¸·Î, ´õ ÀÌ»ó À¯ÅëµÇÁö ¾Ê±â¿¡ ÁÖ¹®ÇÏ½Ç ¼ö°¡ ¾ø½À´Ï´Ù.
ǰÀý : °ø±ÞóÀÇ Àç°í°¡ ¼ÒÁøµÈ »óǰÀ¸·Î Àç Àμâ/Ãâ½ÃÇÒ ¶§±îÁö ÁÖ¹®ÇÏ½Ç ¼ö ¾ø½À´Ï´Ù.