Investigations, Logging and Monitoring, and Foundational Operations

Introduction

This lesson opens Domain 7, Security Operations (13% of the exam, ISC2 exam outline effective 15 April 2024). It covers tasks 7.1 to 7.5: understand and comply with investigations, conduct logging and monitoring activities, perform configuration management, apply foundational security operations concepts, and apply resource protection. The next lesson continues with incident management, detective and preventive measures, patching, and change management (7.6 to 7.9); the lesson after covers recovery, continuity, and physical security.