This annually updated handbook provides a compilation of the fundamental knowledge, skills, techniques, and tools required by IT security professionals. It covers the CISSP(R) Common Body of Knowledge (CBK(R)) that forms the standard on which all IT security programs and certifications are based. Topics covered include access control, physical (environmental) security, cryptography, application security, and operations security. This new edition features the latest developments in information security and the (ISC)2(R) CISSP CBK, including advanced persistent threats, new HIPAA requirements, social networks, virtualization, and SOA.