How a harmless-looking certificate swap touches four systems, the four questions an impact analysis asks, and why test results have to reach the approver before a change reaches production. From Domain 1, General Security Concepts, of Chris's new CompTIA Security+ (SY0-801) course on Pluralsight.

In this deep dive

• A certificate replacement that touches a customer portal, an internal API, a load balancer and a mobile app
• The impact analysis questions: who's affected, what depends on it, does it change our security exposure, and what would the business feel
• Why a change can be technically correct and still be a business failure
• Development, test or staging, and production, and why the test environment has to resemble production
• Functional tests, compatibility tests and a security scan, and how the results inform the CAB's approval

This segment is from Domain 1, General Security Concepts, of Chris's new CompTIA Security+ (SY0-801) course on Pluralsight.

Links

• CompTIA Security+ (SY0-801): General Security Concepts (Pluralsight)
• All of Chris Rees's Pluralsight courses
• Watch this lesson on YouTube
• Security+ study guides

Transcript and links: https://www.skillthropic.com/podcast/impact-analysis-test-results-deep-dive?utm_source=podcast&utm_medium=audio&utm_campaign=impact-analysis-test-results-deep-dive

Study guides for Security+, CySA+, CISSP, CCSP and CompTIA SecAI+: skillthropic.com