Data Lifecycle & Asset Retention
Ready to ace the CISSP exam? Join our study group and get the ultimate guide to the Certified Information Systems Security Professional (CISSP) certification!
Session 7 continues Domain 2: Asset Security. We will cover the following exam objectives:
2.3 Provision information and assets securely
2.4 Manage data lifecycle
2.5 Ensure appropriate asset retention (e.g., End of Life (EOL), End of Support)
Access slides, practice questions, and more: https://cissp.brittwhite.io
A huge thank you to Rotas Security for supporting this study group. Check them out at https://rotassecurity.com/ for your offensive security needs.
CISSP Resource Links:
Exam Outline: https://www.isc2.org/certifications/c...
Chapters:
00:00 Intro to CISSP Study Group
00:44 Today's Outline
01:20 Asset Security Importance
01:52 Objective 2.3: Secure Provisioning
02:54 Asset Ownership: Accountability
03:40 Asset Classification Boards
05:12 Asset Inventory Essentials
06:23 Effective Asset Management
07:38 Real-World Asset Examples
08:50 Secure Provisioning Recap
09:23 Objective 2.4: Data Lifecycle Management
10:02 Data Management Roles
12:16 Data Lifecycle Stages
14:17 Understanding Data Remanence
15:28 Data Sanitization Methods
16:29 NIST SP 800-88: Data Destruction Effectiveness
18:26 Modern Data Destruction Challenges
19:40 Object Reuse Explained
20:47 Solid State Drive (SSD) Challenges
21:48 Cloud Data Destruction
22:28 Data Lifecycle Recap
23:14 Objective 2.5: Asset Retention
23:52 End of Life (EOL) vs. End of Support (EOS)
25:02 Why Retention Matters
28:21 Data Archiving Policies
31:41 Comprehensive Retention Strategy
32:20 Session Key Points
33:31 Session After-Party