CISSP Exam Cram: Laws and Regulations (CISSP 2021)

This video is your guide to laws and regulations likely to appear on the CISSP exam! It includes coverage of a wide range of topics likely to appear on the exam, in a format designed to minimize the time and effort to exam readiness!
PDF presentation download for this session
1drv.ms/b/s!AmhtzcmYt5AViNRcP...
ISC2 Official 2021 CISSP Study Guide and Practice Tests Bundle
amzn.to/3yoWXpO
CISSP 2021 Official Study Guide
amzn.to/3nQEOgt
CISSP 2021 Official Practice Tests
amzn.to/3toaGdp
FREE CISSP 50-questions practice quiz
insidethemicrosoftcloud.com/c...
NOTICE: Some of our video description contain affiliate links, which means we may receive a small commission on a purchase without additional cost to you, if you buy something.

[@vikranth5781]

Really great videos and quick way to refresh the Book content one has read.. Thank you for providing these free videos.. Appreciate your work

[@InsideCloudAndSecurity]

Glad you like them! Good luck on the exam! 👍

[@Db19451]

Thanks for the video. Just to confirm, Privacy Shield still works/exists?

[@kwakufordjour9568]

After 175 questions, I am pleased to announce that I provisionally passed the CISSP today. May God continue to bless you and everything you do and if I can donate, help, or support your vision and generosity in any way, please let me know. I will be more than happy to help. Take care!

[@InsideCloudAndSecurity]

Glad the series was helpful! CONGRATULATIONS! 🏆🎉🌟

[@Speedster9550]

Great video - thank you for taking the time to help us! 👍🏾

[@InsideCloudAndSecurity]

Thanks Derek. 😉

[@muhammadadnanbukhari3002]

Today I passed CISSP. Your videos helped me for last week revision. Thank you so much

[@InsideCloudAndSecurity]

Glad to hear that! Congratulations! 🏆🎉

[@MrTimeWarps]

Thank you for all of the courses and effort you have put into creating them. Your videos on CISSP are my favourite study material. Very clear!

[@InsideCloudAndSecurity]

So glad to hear that! GOOD LUCK ON YOUR EXAM! 🍀🤞👍

[@user-xf2su2nc1d]

Just one correction I would make - slides say GDPR notification requirement is 24 hours - looked it up its 72 hours. Had a practice question on it which is why I double checked.

[@InsideCloudAndSecurity]

That's right (I quoted a UK variant in this video in error). This bit of errata was captured and corrected in the full course I released here on KZbin a few months ago - "CISSP Exam Cram (Full Course)" - kzbin.info/www/bejne/lZ_ci5uPo6iBgqM

[@johnandpaulshow]

Great video. Thanks so much for the value 🙏

[@InsideCloudAndSecurity]

Anytime. Happy to help. Good luck on the exam! 🍀🤞

[@reshubabbar4908]

Great video. Thanks so much

[@InsideCloudAndSecurity]

Glad you like it. Make sure you have a look at my full course, which includes my latest updates across all 8 domains. Good luck! 🍀🤞 kzbin.info/www/bejne/lZ_ci5uPo6iBgqM

[@tizziejames9040]

Really helpful. Thanks ever so much.

[@InsideCloudAndSecurity]

Glad it was helpful! Good luck on the exam! 🤞🍀

[@NP-zr3jz]

HI, Useful Video, at 29:29 GDPR notice, it should be 72 hrs, not 24 hours?

[@InsideCloudAndSecurity]

I believe both are correct actually, but this detail very unlikely to appear on the exam.. Depending on the circumstances, the breach notification regulation provides for both the initial notification (24 hours) and full notification to follow (72 hours) if all details are not available. However, I suspect some sources you'll find may only mention the second figure. For the exam, I'd focus more on the details I highlighted.

[@mlamson40]

Thank you!!!

[@InsideCloudAndSecurity]

20 videos into my CISSP series, I'd love to hear any suggestions for additional topics if anything more I can cover. 💡

[@melvynmildiner2695]

I love these videos. One small note though: in this video you define PHI with two different words for ‘p’ - and you do it on a single slide!

[@InsideCloudAndSecurity]

Ah sorry, HIPAA language does this and I didn't notice. HIPAA Privacy Rule provides federal protections for PERSONAL Health Information, which through the regulation is thus PROTECTED Health Information. See this page on the Health and Human Services site and you'll see what I mean! - www.hhs.gov/answers/hipaa/what-is-phi/index.html

[@antonygoncalves9440]

Hello, i think there is mistake regarding Data breach notification (29:10). It's not 24hours but 72 hours as far as i know.

[@InsideCloudAndSecurity]

Indeed, and I call this out in another comment. There's actually a GDPR wrinkle in the UK where they have a 24-hour requirement in some cases, but the broader EU requirement is 72 hours. Thank you for taking time to comment Antony. Good luck on the exam!

[@1994719946]

Sarbens oxley act? SOX is not important? Saw some questions in OSG practice exams

[@InsideCloudAndSecurity]

those in the video are pretty commonly cited as most important for this exam. If SOX shows up, expect it would most likely to be a distractor / wrong answer. While fairly complex, it is a law that applies to publicly traded companies meant to protect investors from fraudulent accounting activities by corporations. Good description of SOX here if you're interested www.upguard.com/blog/sox-compliance#toc-1. The laws in this video (and the exam) tend to focus more on data privacy and security, and reporting requirements in the event of a breach

[@1994719946]

@@InsideCloudAndSecurity Thanks

[@yoryiyork]

Great

[@InsideCloudAndSecurity]

👍

[@ashwinivyas5639]

Hi just want to confirm, The Data Breach communication timeline is 72hrs, or 24 hrs. ? Thanks

[@InsideCloudAndSecurity]

Here's the detail: For GDPR (article 33), In the case of a personal data breach, the controller shall without undue delay and, where feasible, not later than 72 hours after having become aware of it (the likely exam scenario). Under the UK GDPR docs, there are scenarios where notification must still must be done within 24 hours (according to ico.org.uk/). See the full article below that details the collective 72 hour / 24 hour considerations. ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/personal-data-breaches/

[@ashwinivyas5639]

@@InsideCloudAndSecurity Thanks a ton for such a detailed response.

[@Ritinagi]

For the exam though, GDPR breach notification timeline would be 72 hrs right?

[@TarikAbdAlsamea]

Thank you, I think GDPR breach reporting is 72 hours not 24 hours.

[@InsideCloudAndSecurity]

Correct, and this has been corrected in the CCSP Exam Cram - Full Course HERE (kzbin.info/www/bejne/lZ_ci5uPo6iBgqMsi=EgrAxRtDA-Y6nHj3&t=5018). I cited a UK provision here in error early in the series dev cycle.

[@Jonesy01]

Unsure if you'll see this any time soon but isnt the time to report for GDPR 72hours? i've done some googling and i'm not seeing 24hour listed anywhere from trusted sources. Specifically Article 33 of GDPR.

[@InsideCloudAndSecurity]

Brice, yes, it's actually 72 hours (except in particular situation that won't come up on the exam). This bit of errata in this video was captured in errata and corrected in the full course at kzbin.info/www/bejne/lZ_ci5uPo6iBgqM)

[@Jonesy01]

@@InsideCloudAndSecurity Gotcha, thank you. Also in youre reply you said It's actually 24 hours, i'm assuming you meant 72? lol. Appreciate the quick reply, i've really been enjoying your video's. They are incredibly helpful for someone who cant sit down and get through a book.

[@InsideCloudAndSecurity]

@@Jonesy01 Oh my, the effects of multi-tasking. Yes, edited my previous answer to you .🤦‍♂

[@Jonesy01]

@@InsideCloudAndSecurity You rock, sir

[@1994719946]

GDPR data breach notification to authorities should be no less than 72* hours

[@InsideCloudAndSecurity]

Yes, this is called out in the errata below the video and updated in new release coming tomorrow. I deal with a special UK situation where GDPR reporting requirement is 24 hours, and was unfortunately top-of-mind when I recorded this.😒

[@ahmediqbal4366]

I thought with GDPR you must notify the breach within 72 hours not 24?

[@InsideCloudAndSecurity]

it is. Early in the content development cycle. I cited a UK provision in error (mentioned in comments). I corrected in the full course at this timestamp - kzbin.info/www/bejne/lZ_ci5uPo6iBgqMsi=bar9AQFvfVCdX0Si&t=5945

[@yashraptor]

Isn't coppa only applicable to age below 13 years

[@InsideCloudAndSecurity]

Yes, to children below age 13. For the exam, focus on the fact that it protects children.

[@svyat1607]

GDPR - Data breach notification - 72 hours ! not 24.

[@InsideCloudAndSecurity]

Called out in comments/course errata and corrected to 72 hours in the full course at - "CISSP Exam Cram Full Course (All 8 Domains)" kzbin.info/www/bejne/lZ_ci5uPo6iBgqM