Chapter 8

Security Research and Analysis

The Following CompTIA CASP Exam Objectives Are Covered in This Chapter:

• 3.1 Analyze industry trends and outline potential impact to the enterprise
  • Perform ongoing research
  • Best practices
  • New technologies
  • New security systems and services
  • Technology evolution (e.g., RFCs, ISO)
  • Situational awareness
  • Latest client-side attacks
  • Threats
  • Counter zero day
  • Emergent issues
  • Research security implications of new business tools
  • Social media/networking
  • Integration within the business (e.g., advising on the placement of company material for the general public)
  • Global IA industry/community
  • Conventions
  • Attackers
  • Emerging threat sources
  • Research security requirements for contracts
  • Request for Proposal (RFP)
  • Request for Quote (RFQ)
  • Request for Information (RFI)
  • Agreements