CISSP: A Comprehensive Beginners Guide on the Information Systems Security

As information security professionals, risk evaluation and mitigation are the key parts of our job. Dealing with risk is the theme of our roles, be it as firewall engineers, auditors, penetration testers, management, etc. The key functions of the Security and Risk Management domain are risk analysis and mitigation, as well as, ensuring the best organizational structure for a robust information security system is in place. In this area of expertise, it's the quality of the people that can make or break an organization. By "quality of the people", we mean knowledgeable and experienced staff with supportive, as well as, vested leadership are of the highest quality.