The CISSP (Certified Information Systems Security Professional) certification provides internationally recognized validation of information security expertise from ISC². This training program prepares participants for the CISSP examination and provides a comprehensive review of the eight domains of the CISSP Common Body of Knowledge (CBK).
Participants will gain advanced knowledge of information security concepts, principles, standards, and practices required to establish, implement, and manage security programs across organizations and government entities.
Upon successful completion of this course, participants will be able to:
- Understand and apply the principles of Security and Risk Management.
- Protect and manage information assets through effective Asset Security practices.
- Apply security engineering principles to secure systems, applications, and infrastructure.
- Design and manage secure network and communication architectures.
- Implement identity, access, assessment, testing, and security operations controls.
- Understand and apply secure software development practices across the software lifecycle.
Day 1: Security and Risk Management
- Confidentiality, Integrity, and Availability (CIA)
- Security Governance Principles
- Compliance and Regulatory Requirements
- Legal and Ethical Considerations
- Security Policies, Standards, Procedures, and Guidelines
- Business Continuity Requirements
- Risk Management Concepts and Threat Modeling
- Security Awareness, Education, and Training
Day 2: Asset Security and Security Engineering
Asset Security
- Information Classification and Ownership
- Privacy Protection
- Data Retention Requirements
- Data Security Controls
- Information Handling Requirements
Security Engineering
- Security Architecture and Design Principles
- Security Models and Frameworks
- Security Controls and Countermeasures
- Cryptography Fundamentals
- Physical and Facility Security Design
- Security Vulnerability Assessment and Mitigation
Day 3: Communications Security and Identity Management
Communications and Network Security
- Secure Network Architecture
- Securing Network Components
- Secure Communication Channels
- Network Attack Prevention and Mitigation
Identity and Access Management (IAM)
- Physical and Logical Access Controls
- Identification and Authentication
- Authorization Mechanisms
- Identity Lifecycle Management
- Identity as a Service (IDaaS)Third-Party Identity Services
Day 4: Security Assessment, Testing and Operations
Security Assessment and Testing
- Security Testing Strategies
- Security Control Testing
- Security Metrics and Data Collection
- Internal and Third-Party Audits
Security Operations
- Logging and Monitoring
- Configuration Management
- Incident Response
- Resource Protection Techniques
- Vulnerability and Patch Management
- Change Management Processes
Day 5: Business Continuity, Disaster Recovery and Software Development Security
Security Operations (Continued)
- Disaster Recovery Planning
- Recovery Strategies
- Business Continuity Planning
- Physical Security Management
- Personnel Safety
Software Development Security
- Secure Software Development Life Cycle (SDLC)
- Security Controls in Development Environments
- Software Security Assessment
- Secure Software Acquisition
- Software Security Best Practices
- Information Security Professionals
- Cybersecurity Managers
- IT Managers and Administrators
- Security Consultants and Auditors
- Professionals Preparing for the CISSP Certification Exam