Practice time: Access Controls Models

1. Find the examples of systems where corresponding access control models are implemented: Role-Based Access Control (RBAC) Rule Base Access Control

1. Search for the security standards where the following security practices are demanded as a part of requirements: Implicit deny Least privilege Separation of duties Privilege management Defense-in-Depth 2. Provide the examples of Implicit deny concept practical use cases

Prepare Security Management process workflow diagram by selecting one of the processes from the list below: Asset Management Process Access Management Process Backup and Recovery Process Security Incident Management Process Security Audit Process Security Awareness and Training Process Vulnerability Management Process Patch Management Process Business Continuity Management Process Security Risk Management Proces

Practice time: Social Engineering

1. Write a template for convincing phishing Email 2. Write a template for convincing phishing SMS 3. Find tools or services allowing to generate phishing content