NISP Level 1 - Security Operations case studies
NISP Level 1 - Security Operations · Put your knowledge to work in context.
NISP Level 1 (National Information Security Professional, Level 1) is an entry-level Chinese information security certification aimed at people moving into security operations roles or adding a security baseline to an IT, network, or audit job. It tests breadth rather than depth: foundational concepts and security models, the Chinese legal and standards landscape, identity and access management, network perimeter defense, endpoint and server hardening, application and data protection, cryptography basics, day-to-day security operations and incident response, vulnerability management and risk assessment, and continuity and recovery planning. The NISP Level 1 - Security Operations case studies are 5 cases and about 4,696 words.
1Orphaned Identities, a Shared DBA Account, and a Silent Provisioning Connector
Northwind Logistics runs an 1,800-person hybrid workforce on a single identity provider. A quarterly access review surfaced 42 enabled accounts whose owners no longer appear in the HR feed; 17 of these still authenticate at least weekly, and three hold membership in Domain Admins.
897 words, about 4 min2Jittered Beaconing, a Closing Branch, and a Severity Threshold That Does Not Fit
A 55-seat SOC at a regional bank receives an EDR alert: 14 teller workstations have begun resolving a newly registered domain every 61 seconds, with deliberate jitter. Two of those hosts also show an unsigned scheduled task created at 02:14.
910 words, about 5 min3Co-Located Keys, an Unrotated Ticket Key, and a $180k Legacy Interface
MediTrust runs a patient portal behind a TLS terminator. A security scan and an architecture review produce five findings.
1,004 words, about 5 min4312 Base-Score-9.8 Findings Nobody Can Reach, and Nine That Matter
HealthCo's quarterly scan reports 2,140 findings across 1,150 servers in an estate of roughly 3,000 assets. Of these, 312 are CVSS 9.8 findings in a widely used open-source library.
913 words, about 5 min5Encrypted Backup Catalog, a Nine-Day-Old Tape, and an Eight-Hour RTO
Coastal Foods operates three plants on a single-site VMware ERP. The stated RTO is eight hours and the RPO for financials is one hour.
972 words, about 5 min