Certified Information Systems Security Professional

Course Objectives

• Achieve CISSP Certification
• Excel in Security and Risk Management
• Implement Effective Asset Security
• Apply Security Engineering Principles
• Enhance Communication and Network Security
• Manage Identity and Access Control
• Conduct Comprehensive Security Assessments
• Execute Effective Security Operations
• Integrate Security into Software Development

Course Outline

Security & risk management

• Confidentiality, integrity and availability
• Security governance policies and their supporting counterparts
• Compliance
• Global information security
• Legal and regulatory policies
• Professional ethics
• Business continuity
• Personnel security
• Risk management
• Threat modeling
• Acquisition security
• Security awareness

Asset security

• Classify information
• Identify and document asset ownership
• Asset privacy concerns
• Asset retention policies
• Data security controls
• Handling requirements

Security engineering

• Secure engineering processes
• Review security engineering models
• Security architecture
• Web-based vulnerabilities
• Mobile vulnerabilities
• Embedded device vulnerabilities
• Cryptography components and their relationships
• Site and facility design
• Physical security

Communication and network security

• Network architecture
• Network components
• Communication channels
• Handling network attacks

Identity and access management

• Physical and logical access
• Authentication of people and devices
• Identity as service (cloud identity)
• Third-party identity
• Authorization mechanisms
• Access control attacks
• Provisioning life cycle

Security assessment and testing

• Validate assessment
• Security control
• Management and operational controls
• Analyze and report test outputs
• Internal and third-party audits
• Security operations
• Handling investigations
• Investigation types
• Logging and monitoring
• Provisioning of resources

Security operations

• Resource protection
• Incident management
• Preventative measures
• Patch and vulnerability management
• Change management
• Disaster recovery
• Business continuity
• Manage physical security
• Personnel safety concerns

Software development security

• Software development life cycle
• Security for development environments
• Software security
• Purchased software risk