3Security controls

• 3.1Malware Countermeasures (Antivirus, EDR, Patch Management, Ransomware Defense)

  Learn how antivirus software detects malware via pattern matching (signature/definition files), and how behavior-based detection and EDR (Endpoint Detection and Response) address unknown threats. Cover patch management to close vulnerabilities, the sandbox technique for safely testing unknown executables in an isolated environment, and backups (the 3-2-1 rule, offline/offsite storage) as the cornerstone of ransomware defense — all from the perspective of organizational operational management.

• 3.2Unauthorized Access and Network Security Controls (FW/IDS/IPS/WAF, DMZ, Zero Trust)

  Learn the division of labor among four mechanisms that protect different layers of network communication: firewalls, IDS (Intrusion Detection Systems), IPS (Intrusion Prevention Systems), and WAF (Web Application Firewall). Also cover the DMZ that isolates externally facing servers, VPNs that protect inter-site and remote-worker traffic, proxies that relay and control web access, the zero trust approach that goes beyond the limits of perimeter defense, and wireless LAN security (WPA3, rogue access point countermeasures).

• 3.3Data Leak Prevention and Physical Security Controls (DLP, Encryption, Clear Desk, Access Control)

  Learn technical data-leak prevention controls — DLP (Data Loss Prevention), data encryption, and removable-device/data-exfiltration control — alongside physical controls: clear desk and clear screen policies, physical access (entry/exit) control, locks and surveillance cameras, physical destruction of storage media, and tamper resistance. These are organized through the lens of defense in depth, where technical and physical controls complement each other.

• 3.4Access Management and Authorization (Least Privilege, RBAC, Privileged Account Management, Log Management)

  Learn the difference between three related-but-distinct concepts — identification, authentication, and authorization — plus the principle of least privilege and need-to-know, RBAC (Role-Based Access Control) that assigns permissions by role, the strict management required for privileged accounts that can touch the core of a system, the account lifecycle from onboarding through role changes to offboarding, and log management and monitoring that underpins after-the-fact traceability and anomaly detection.