Security is made up of system administration, physical security, installation, configuration mechanisms within the environment, and continuous monitoring.
Certification
Certification is the comprehensive technical evaluation of the security components and their compliance for the purpose of accreditation.
The goal of a certification process is to ensure that a system, product, or network is right for the customer’s purposes.
The certification process and corresponding documentation will indicate the good, the bad, and the ugly about the product and how it works within the given environment.
剩余内容请看本人公众号debugeeker, 链接为CISSP考试指南笔记：3.7 认证与认可
