This annually updated handbook provides a compilation of the fundamental knowledge skills techniques and tools required by IT security professionals. It covers the CISSP(R) Common Body of Knowledge (CBK(R)) that forms the standard on which all IT security programs and certifications are based. Topics covered include access control physical (environmental) security cryptography application security and operations security. This new edition features the latest developments in information security and the (ISC)2(R) CISSP CBK including advanced persistent threats new HIPAA requirements social networks virtualization and SOA.