1 CISSP®—Introduction 2.6

2 Before you start 1.11

3 Objectives 1.20

4 CISSP®2:19

5 (ISC)²®1:58

6 CISSP® Domains3:47

7 Benefits of CISSP® for Professionals2:1

8 Benefits of CISSP® for Employers2:6

9 CISSP® Certification Requirements1:42

10 CISSP® Certification Requirements (contd.)1:21

11 CISSP® Certification Requirements (contd.)1:57

12 CISSP® Certification Requirements (contd.)2:5

13 CISSP® Examination3:36

14 CISSP® Examination (contd.)1:30

15 Conclusion

1 Domain 01—Security and Risk Management1:10

2 Objectives1:32

3 Importance of Information Security and Risk Management2:3

4 Role and Importance of CIA in ISM2:7

5 Confidentiality2:51

6 Integrity2:32

7 Availability1:57

8 Information Security1:33

9 Information Security Management1:26

10 Information Security Governance2:6

11 IT Security and Organizational Goals, Mission, and Objectives1:29

12 Goals, Mission, and Objectives2:55

13 Aligning Security with Goals, Mission, and Objectives1:41

14 Business Scenario2:14

15 Organizational Processes2:28

16 Auditing1:21

17 Control Framework1:40

18 Due Care1:31

19 Due Diligence1:28

20 Security Controls1:49

21 Service Level Agreements1:58

22 Managing Third-Party Governance3:23

23 Offshoring—Privacy Requirements and Compliance2:7

24 Business Scenario1:52

25 Layers of Responsibility2:3

26 Security Policies2:31

27 Types of Security Policies2:35

28 Security Policy Implementation3:7

29 Policy Chart2:8

30 Standards, Guidelines, Procedures, and Baselines3:7

31 Business Scenario1:30

32 Compliance—Need for Compliance2:23

33 Regulatory Compliance1:45

34 Compliance1:39

35 Compliance (contd.)1:57

36 Compliance (contd.)1:48

37 Standards/Manuals/Guidelines for Compliance2:9

38 Computer Crimes1:27

39 Introduction to Computer Crimes1:54

40 Categories of Computer Crimes3:28

41 Business Scenario1:51

42 Major Legal Systems1:45

43 Common Law and Civil Law2:42

44 Customary Law and Religious Law2:44

45 Mixed Law1:28

46 Business Scenario1:36

47 Introduction to Intellectual Property (IP) Law2:1

48 Types of Intellectual Property (IP) Law2:51

49 Types of Intellectual Property (IP) Law (contd.)2:44

50 Types of Intellectual Property (IP) Law (contd.)1:0

51 Business Scenario1:39

52 Import or Export Controls and Trans-Border Data Flow2:10

53 Introduction to Privacy2:59

54 U.S. Privacy Laws2:14

55 U.S. Privacy Laws (contd.)2:21

56 U.S. Guidelines for Managing Privacy2:41

57 EU Council Directive (Law) on Data Protection2:18

58 The U.S.-European Union Safe Harbor3:4

59 Security Definitions3:40

60 Information Risk Management2:9

61 Business Scenario1:54

62 Introduction to Risk Analysis2:6

63 Goals of Risk Analysis1:26

64 Risk Analysis Team1:54

65 Steps for Risk Analysis1:50

66 Information and Assets Valuation2:16

67 Risk Analysis Types1:41

68 Quantitative Risk Analysis—Steps2:47

69 Quantitative Risk Analysis—Problem1:39

70 Qualitative Risk Analysis2:10

71 Delphi Technique2:4

72 Quantitative vs.Qualitative1:29

73 Hybrid Analysis1:45

74 Countermeasure Selection—Problem1:56

75 Countermeasure Selection—Other Factors1:57

76 Handling Risk2:39

77 Business Scenario1:51

78 Threat Modeling1:59

79 Need for Business Continuity Planning1:55

80 Basic Concepts—Disruptive Events3:26

81 Basic Concepts—Business Continuity Planning1:47

82 Importance of Business Continuity Planning1:31

83 Business Continuity Planning Phases1:53

84 BCP/DRP Phase 1—Project Initiation and Scoping3:54

85 BCP/DRP Phase 2—Business Impact Analysis (BIA)2:11

86 BIA—Goals2:20

87 BIA—Steps4:32

88 BIA Steps—Business Unit Level2:7

89 Maximum Tolerable Downtime (MTD)2:46

90 Failure and Recovery Metrics3:52

91 Failure and Recovery Metrics (contd.)2:46 92 Stages of Failure and Recovery1:52 93 BCP/DRP Phase 3—Identify Preventive Controls2:19 94 Importance of Managing Personnel Security1:51 95 Managing Personnel Security—Hiring Practices1:54 96 Managing Personnel Security—Employee Termination1:47 97 Vendor, Contractors, and Consultant Controls1:47 98 Best Work Practices2:44 99 Business Scenario1:48 100 Importance of Security Awareness Training1:54

101 Security Awareness Training: Awareness, Training, and Education2:28 102 Implementation of Security Awareness Training Program1:38 103 Importance of Content Updates1:23 104 Importance of Managing Security Function1:53 105 Best Practices—Budget and Establish Security Metrics2:28 106 Best Practices—Resources and Develop and Implement Strategies2:23 107 Best Practices—Completeness and Effectiveness of the Program1:25 108 Business Scenario1:44 109 (ISC)² Code of Ethics3:31 110 Quiz0:0

111 Summary1:54 112 Conclusion1:6

1 Domain 02—Asset Security1:13 2 Objectives1:28 3 Importance of Asset Security1:39 4 Need for Information Classification2:12 5 Information Classification Objectives1:56 6 Government or Military Sector Classification2:33 7 Commercial or Private Sector Classification2:50 8 Information Classification Criteria2:52 9 Data Classification Considerations1:47 10 Role Responsible for Data Classification1:51

11 Business Scenario1:37 12 Data Management1:53 13 Best Practices for Data Management1:54 14 Data Policy2:14 15 Data Ownership1:54 16 Data Ownership—Best Practices1:45 17 Data Custodians2:15 18 Data Custodians (contd.)1:33 19 Data Quality2:9 20 Data Quality—Aspects1:32

21 Data Quality Assurance and Quality Control1:49 22 Data Documentation1:44 23 Data Documentation Practices2:28 24 Data Standards1:58 25 Data Control Lifecycle1:33 26 Data Specification and Modeling1:37 27 Database Maintenance1:38 28 Data Audit1:41 29 Data Storage and Archiving1:59 30 Data Security1:58

31 Data Access, Sharing, and Dissemination1:56 32 Data Publishing1:32 33 Data Handling Requirements2:25 34 Media Resource Protection4:32 35 Data Remanence2:51 36 Business Scenario1:45 37 Asset Management2:17 38 Software Licensing1:45 39 Equipment Lifecycle1:0 40 Protecting Privacy2:35

41 Ensuring Appropriate Retention2:6 42 Data Security Controls2:36 43 Data in Transit—Best Practices2:11 44 Scoping and Tailoring1:52 45 Scoping and Tailoring (contd.)2:2 46 Standards Selection—US DoD3:10 47 Standards Selection—International Standards2:45 48 Standards Selection—National Cyber Security Framework Manual1:48 49 Standards Selection—Center for Strategic and International Studies1:0 50 Standards Selection—Critical Security Controls2:23

51 Standards Selection—Security Content Automation Protocol2:19 52 Framework for Improving Critical Infrastructure Cybersecurity2:4 53 Business Scenario1:38 54 Quiz0:0 55 Summary1:44 56 Conclusion1:7

1 Domain 04—Communications and Network Security1:15 2 Objectives1:27 3 Importance of Communications and Network Security—Case Study1:39 4 Introduction to Secure Network Architecture and Design1:26 5 Open Systems Interconnection4:43 6 OSI Model Layers2:15 7 Physical Layer2:9 8 Data Link Layer2:18 9 Network Layer1:49 10 Transport Layer2:1

11 Session Layer1:52 12 Presentation Layer2:16 13 Application Layer1:47 14 Transmission Control Protocol/Internet Protocol (TCP/IP) Model2:8 15 Network Access Layer and Internet Layer2:8 16 Host-to-Host Layer and Application Layer2:10 17 Comparison of OSI and TCP/IP Models2:17 18 Introduction to IP Addressing1:48 19 IPv4 and IPv63:35 20 Classful IP Addressing1:38

21 Class A1:31 22 Class B1:30 23 Class C1:27 24 Class D and Class E1:30 25 Classless Inter-Domain Routing3:41 26 Private Networks and Loopback Address2:42 27 Types of IP Addressing2:15 28 Routed and Routing Protocols2:56 29 Types of Network Protocols1:15 30 Transmission Control Protocol (TCP)2:6

31 User Datagram Protocol (UDP)1:46 32 Internet Protocol1:20 33 Address Resolution Protocol2:37 34 Internet Control Message Protocol (ICMP)1:29 35 Hypertext Transfer Protocol (HTTP)2:56 36 Implications of Multi-Layer Protocols1:53 37 Distributed Network Protocol2:7 38 LAN/Network Technologies5:14 39 Transmission Media1:26 40 Twisted Pair2:0

41 Coaxial Cable Box2:45 42 Fiber-Optic Cable Box2:42 43 Network Topologies2:52 44 Media Access Technologies1:46 45 Carrier-Sense Multiple Access with Collision Detection2:20 46 Carrier-Sense Multiple Access with Collision Avoidance2:4 47 Flavors of LAN transmission methods1:30 48 List of Networking Devices3:33 49 VLANs3:8 50 Gateways2:3

51 Network Access Control Devices1:38 52 Packet-Filtering and Application-Level3:40 53 Circuit-Level and Stateful-Inspection2:39 54 Firewall Architectures3:37 55 Network Security Terms2:51 56 Business Scenario1:26 57 Networks2:9 58 Types of Networks2:9 59 WAN Technologies2:11 60 WAN Switching and Devices2:55

61 Network Address Translation and Frame Relay2:36 62 Multi-Protocol Label Switching and VoIP1:58 63 Fiber Channel over Ethernet and Internet Small Computer System Interface2:5 64 Virtualized Networks2:2 65 Introduction to Remote Access1:45 66 VPN using PPTP and L2TP2:44 67 Internet Security Protocol (IPsec)2:6 68 Internet Security Protocol (IPsec) Modes of Operation2:47 69 IPsec Security Protocols—Authentication Header (AH)3:44 70 IPsec Security Protocols—Encapsulating Security Payload (ESP)2:26

71 Components of the IPsec Process2:28 72 Components of the IPsec Process (contd.)2:18 73 IPsec Process1:59 74 Secure Access Protocols3:49 75 Secure Access Protocols (contd.)3:10 76 Secure Access Protocols (contd.)2:3 77 Remote Access Security Methods1:32 78 Multimedia Collaboration1:52 79 Wireless Technologies1:29 80 IEEE Wireless Standards and Spread-Spectrum Technologies2:17

81 Direct Sequence Spread Spectrum and Frequency-Hopping Spread Spectrum2:20 82 WLAN Operational Modes2:30 83 Bluetooth2:37 84 Bluetooth Attack1:15 85 Blue Jacking and Blue Snarfing2:9 86 Blue Bugging, Backdoor Attacks, and Denial of Service Attacks2:3 87 Wireless Security7:29 88 Business Scenario1:49 89 Network Attacks3:33 90 Network Attacks (contd.)3:17

91 Network Attacks—Countermeasures4:2 92 Quiz0:0 93 Summary1:40 94 Conclusion1:8

1 Domain 05—Identity and Access Management1:15 2 Objectives1:31 3 Importance of Identity and Access Management in Information Security1:59 4 Controlling Physical and Logical Access to Assets2:23 5 Controlling Physical and Logical Access to Assets (contd.)2:51 6 Access Subject-Object and Access controls2:13 7 Identity and Access Management Policy1:47 8 Identification Authentication and Authorization2:21 9 Identity Management1:32 10 Identity and Access Provisioning Lifecycle2:28

11 Identity and Access Provisioning Lifecycle (contd.)1:48 12 Guidelines for User Identification1:53 13 Verifying Identification Information2:41 14 Strong Authentication2:26 15 Biometrics—Characteristics3:11 16 Types of Biometrics2:42 17 FRR FAR CER3:4 18 Passwords2:15 19 Password Types2:43 20 Tokens1:30

21 Token Device—Synchronous1:48 22 Token Device—Asynchronous1:40 23 Memory Cards and Smart Cards2:39 24 Attacks on Smart Cards—Fault Generation and Micro-Probing3:8 25 Access Criteria3:4 26 Authorization Concepts3:22 27 Identity Management Implementation1:31 28 Password Management3:2 29 Directory Management2:5 30 Directory Technologies2:35

31 Accounts Management2:16 32 Profile Management1:49 33 Web Access Management1:30 34 Single Sign-On (SSO)2:49 35 SSO Technologies2:1 36 Kerberos3:41 37 Kerberos Steps2:35 38 Problems with Kerberos1:54 39 Business Scenario2:1 40 Access Control Types—Security Layer2:17

41 Access Control Types—Functionality2:39 42 Business Scenario1:24 43 Access Control Models—DAC1:0 44 Access Control Models—MAC1:0 45 Access Control Models—RBAC1:51 46 Business Scenario1:28 47 Access Control Concepts4:12 48 Types of Access Control Administration3:19 49 Remote Authentication Dial-In User Service (RADIUS)2:50 50 TACACS and TACACS+1:56

51 DIAMETER1:58 52 Accountability2:43 53 Accountability (contd.)1:40 54 Session Management1:56 55 Registration and Proof of Identity1:42 56 Credential Management Systems1:47 57 Credential Management Systems—Risks and benefits1:42 58 Federated Identity Management1:45 59 Federated Identity Management Models1:51 60 Federated Identity Management Models (contd.)2:6

61 Federated Identity Management Models (contd.)1:48 62 Identity as a Service1:44 63 Identity as a Service—Functionality2:53 64 Identity as a Service—Possible Issues2:7 65 Integrate Third-Party Identity Services2:5 66 Integrate Third-Party Identity Services (contd.)1:49 67 Unauthorized Disclosure of Information4:37 68 Threats to Access Control5:27 69 Protection against Access Control Attacks1:39 70 Access Control Best Practices1:53

71 Access Control Best Practices (contd.)1:29 72 Quiz0:0 73 Summary1:39 74 Conclusion1:7

1 Domain 06—Security Assessment and Testing1:14 2 Objectives1:25 3 Security Assessment and Testing—Introduction1:36 4 Assessment and Test Strategies1:48 5 Vulnerability Assessment2:4 6 Penetration Testing2:18 7 Log Management2:14 8 Log Management—Advantages and Challenges1:44 9 Log Management—Best Practices1:48 10 Log Management—Operational Process1:40

11 Logged Events1:27 12 Synthetic Transactions1:59 13 Reasons to Use Synthetic Transactions1:51 14 Code Review and Testing1:49 15 Testing Techniques2:16 16 Security Testing in the SDLC2:55 17 Software Product Testing Levels2:5 18 Misuse Case Testing1:37 19 Misuse Case Testing—Scenarios2:19 20 Test Coverage Analysis1:38

21 Interface Testing1:35 22 API Testing (contd.)1:59 23 Interface Testing (contd.)1:27 24 GUI Testing1:51 25 Common Software Vulnerabilities2:28 26 Business Scenario1:54 27 Information Security Continuous Monitoring2:32 28 Information Security Continuous Monitoring—Strategy and Process2:55 29 Risk Evaluation and Control—Metrics1:0 30 Security Controls Monitoring Frequencies3:24

31 ISCM—Benefits1:50 32 Key Performance and Risk Indicators2:12 33 Internal and Third-Party Audits2:33 34 Audit Frequency and Scope1:47 35 Statement on Auditing Standards No. 702:43 36 Service Organization Controls1:57 37 SOC 1 Report2:23 38 SOC 2 Report2:40 39 SOC 2 Reports (contd.)2:7 40 SOC 3 Report1:41

41 SOC 1, SOC 2, and SOC 3 Comparison1:58 42 Audit Process—Audit Preparation Phase2:3 43 Audit Process—Audit Phase1:43 44 Business Scenario1:36 45 Quiz0:0 46 Summary1:52 47 Conclusion1:7

1 Domain 07—Security Operations1:15 2 Objectives1:24 3 Importance of Security Operations—Case Study1:47 4 Introduction to Investigations1:41 5 Investigation Challenges2:4 6 Investigations—Primary Activities2:51 7 Crime Scene1:52 8 Forensic Investigation Guidelines2:7 9 Incident Response Terminologies2:53 10 Incident Response Goals1:28

11 Incident Response Team2:39 12 Incident Response Procedures3:19 13 Incident Response Procedures (contd.)1:59 14 Incident Response Procedures (contd.)1:27 15 Incident Response Procedures (contd.)1:31 16 Business Scenario1:52 17 Evidence2:21 18 Evidence Lifecycle2:17 19 Chain of Evidence2:4 20 Types of Evidence4:47

21 Computer Forensics Procedure1:50 22 Requirements for Investigation Types2:15 23 Logging and Monitoring Activities1:40 24 Intrusion Detection System3:52 25 Intrusion Prevention System3:30 26 Security Information and Event Management (SIEM)2:12 27 Security Information and Event Management (SIEM)—Characteristics1:45 28 Continuous Monitoring1:53 29 Egress Filtering1:0 30 Data Leak or Loss Prevention (DLP)2:26

31 Steganography and Digital Watermarking1:58 32 Business Scenario1:44 33 Secure Provisioning of Resources through Configuration Management2:8 34 Secure Provisioning of Resources through Configuration Management (contd.)1:52 35 Introduction to Security Operations1:37 36 Security Operations Concepts1:44 37 Security Operations1:51 38 Effects of Operations Controls on C.I.A.1:29 39 Business Scenario2:3 40 Operational Resilience2:8

41 Threats to Operations3:12 42 Threats to Operations (contd.)3:36 43 Vulnerabilities4:30 44 Controls2:49 45 Business Scenario1:44 46 Need for Controlling Privileged Accounts2:18 47 Identity and Access Management2:30 48 Types of Accounts2:29 49 Commonly Used Roles2:1 50 Commonly Used Roles (contd.)2:53

51 Monitoring Special Privileges1:33 52 Service Level Agreements (SLAs)2:15 53 Business Scenario1:45 54 Protect Valuable Assets2:28 55 Protecting Physical Assets1:45 56 Protecting Information Assets2:7 57 Protecting Resources2:33 58 Controls for Protecting Assets—Hardware Controls2:51 59 Controls for Protecting Assets—Software Controls3:2 60 Controls for Protecting Assets—Media Controls2:0

61 Controls for Protecting Assets—Administrative Controls3:51 62 Cloud and Virtual Storage1:53 63 Cloud and Virtual Storage Security Issues1:53 64 Types of Virtualized Storage2:0 65 Hard Copy Records1:46 66 Business Scenario1:34 67 Incident Management2:46 68 Security Measurements, Metrics, and Reporting1:32 69 Managing Security Technologies1:42 70 Incident Management—Detection Phase1:27

71 Intrusion Detection System1:46 72 Security Information Event Management (SIEM)3:38 73 Anti-Malware Systems1:59 74 Monitoring Techniques—Violation Analysis2:12 75 Incident Management—Other Phases1:57 76 Trusted Recovery and System Recovery2:54 77 Problem Management2:29 78 Operating and Maintaining Preventive Measures2:2 79 Patch Management2:15 80 Vulnerability Management2:19

81 Change Management2:39 82 Change Control Process2:23 83 Configuration Management3:24 84 Configuration Management (contd.)1:26 85 Business Scenario1:37 86 Develop a Recovery Strategy2:18 87 Types of Recovery—Business Recovery and Facility and Supply Recovery1:44 88 Types of Recovery—User Recovery1:29 89 Types of Recovery—Operational Recovery1:56 90 Recovery Partners Strategy3:44

91 Backup Sites1:51 92 Backup Sites (contd.)4:6 93 Backup Sites (contd.)2:36 94 Backup Methods2:36 95 Importance of Maintaining Resilient Systems3:35 96 Redundancy and Fault Tolerance2:54 97 Redundancy and Fault Tolerance Methods2:13 98 Redundancy and Fault Tolerance Methods (contd.)5:21 99 Best Practices for Backup and Recovery1:55 100 Business Scenario1:43

101 Disaster Recovery—Planning Design and Development1:37 102 Planning Design and Development—Step 1 and Step 22:38 103 Planning Design and Development—Step 3 and Step 43:19 104 Disaster Recovery Phases—Implementation, Testing, and Training1:44 105 Importance of Testing1:19 106 Types of Testing2:4 107 Types of Testing (contd.)2:30 108 Types of Testing (contd.)2:54 109 Training3:57 110 Disaster Recovery Phases—Maintenance3:49

111 Disaster Recovery Phases—Maintenance (contd.)1:26 112 Business Scenario2:4 113 Perimeter Security2:32 114 Barriers1:37 115 Fences2:14 116 Gates2:40 117 Walls and Bollards2:13 118 Perimeter Intrusion Detection5:26 119 Business Scenario1:42 120 Importance of Lighting2:12

121 Types of Lighting Systems2:20 122 Types of Lights2:21 123 Access Control2:41 124 Types of Access Control Systems7:33 125 Business Scenario1:42 126 Building and Inside Security9:5 127 Personnel Security2:28 128 Business Scenario1:50 129 Quiz0:0 130 Summary1:0 131 Conclusion1:6

1 Domain 08 – Software Development Security1:15 2 Objectives1:25 3 Importance of Software Development Security1:51 4 System Environments2:9 5 Distributed Environment1:11 6 Client/Server Systems and Local Environment1:35 7 Distributed Data Processing and Agents1:45 8 Applets1:42 9 Programming Concepts2:22 8.010 Compiler Vs Interpreter2:39

11 Programming and Software2:40 12 Threats in the Software Environment2:15 13 Threats in the Software Environment (contd.)3:11 14 Threats in the Software Environment (contd.)2:7 15 Threats in the Software Environment (contd.)2:3 16 Threats in the Software Environment (contd.)1:49 17 Threats in the Software Environment (contd.)1:46 18 Business Scenario2:12 19 System Life Cycle and Systems Development3:35 20 Systems Development Life Cycle3:31

21 SDLC—Operation and Maintenance1:42 22 Integrated Product Team (IPT)1:42 23 DevOps1:39 24 Software Testing Methods4:18 25 Software Testing Levels1:43 26 Application Controls1:35 27 Software Development Methods2:9 28 Software Development Methods (contd.)2:9 29 Software Development Methods (contd.)1:53 30 Software Development Methods (contd.)1:54

31 Software Development Methods (contd.)2:32 32 Java Security1:57 33 Secure Software Development Best Practices1:47 34 Business Scenario2:5 35 Object-Oriented Programming Terms2:1 36 Object – Oriented Programming Terms (contd.)1:34 37 Object-Oriented Programming—Definition2:23 38 Distributed Object-Oriented Systems2:47 39 Object Request Brokers1:49 40 COM—Component Object Model1:28

41 DCOM—Distributed Component Object Model1:38 42 CORBA—Common Object Request Broker Architecture1:58 43 Software Security and Assurance2:18 44 Software Security and Assurance (contd.)1:43 45 Software Security and Assurance (contd.)1:53 46 Software Security and Assurance (contd.)1:42 47 Software Security and Assurance (contd.)1:41 48 Software Security and Assurance (contd.)1:50 49 Software Security and Assurance (contd.)1:40 50 Software Security and Assurance (contd.)1:55

51 Software Security and Assurance (contd.)1:40 52 Software Security and Assurance (contd.)1:36 53 Software Security and Assurance (contd.)1:56 54 Software Security and Assurance (contd.)1:54 55 Software Security and Assurance (contd.)1:35 56 Software Security: XML and Security Assertion Markup Language2:23 57 Software Security: SOA3:15 58 Audit and Assurance Mechanisms3:24 59 Assessing the Effectiveness of Software Security1:51 60 Assessing the Effectiveness of Software Security (contd.)1:51

61 Assessing the Security Impact of Acquired Software2:15 62 Code Repositories and Application Programming Interfaces2:4 63 Business Scenario1:47 64 Database and Data Warehousing Environments2:25 65 Database Terms2:9 66 Types of Databases1:27 67 Types of Databases (contd.)1:27 68 Types of Databases (contd.)1:41 69 Types of Databases (contd.)1:29 70 Types of Databases (contd.)1:43

71 Database—Threats and Vulnerabilities5:40 72 Introduction to Data Warehousing2:4 73 Data Warehousing Concepts2:57 74 Database Normalization2:17 75 DBMS Controls5:26 76 Business Scenario1:39 77 Malwares—Types5:56 78 Malware Protection2:31 79 Business Scenario1:35 80 Importance and Role of Knowledge Management2:3

81 Knowledge-Based System/Artificial Intelligence1:33 82 Knowledge-Based System—Expert System2:22 83 Knowledge-Based System—Neural Network2:33 84 Web Application Environment—Threats and Vulnerabilities2:35 85 Web Application Environment Security2:3 86 Web Application Environment Security (contd.)2:14 87 Web Application Environment Security (contd.)1:34 88 Web Application Environment Security (contd.)1:45 89 The Ten Best Practices for Secure Software Development—(ISC)27:28 90 Quiz0:0 91 Summary2:7 92 Conclusion