Describe an effective process that organizations should follow to ensure proper configuration management of operating systems and applications.

Explain the role that security standards play in development of an information security program.

Describe commonly used information security management models and standards bodies.

Evaluate the roles that are appropriate for participation in a security administration and policy planning team.

Explain how password configuration and policy impact the overall strength of an organization's access control and authentication strategies.

Recommend procedures to support coordinated effort between IT and information security that will support the security life cycle and secure configuration of network devices.