Courses Details
Course Overview

CISSP training provides a comprehensive review of the knowledge required to effectively design, engineer and manage the overall security posture of an organization. This training course will help students review and refresh their knowledge and identify areas they need to study for the CISSP exam.The Certified Information Systems Security Professional (CISSP) is the most globally recognized certification in the information security market. CISSP validates an information security professional’s deep technical and managerial knowledge and experience to effectively design, engineer, and manage the overall security posture of an organization.

The broad spectrum of topics included in the CISSP Common Body of Knowledge (CBK) ensure its relevancy across all disciplines in the field of information security. Successful candidates are competent in the following 8 domains:    

  Security and Risk Management

  Asset Security

  Security Architecture and Engineering

  Communication and Network Security

  Identity and Access Management (IAM)

  Security Assessment and Testing

  Security Operations

  Software Development Security

Course Schedule
Target Audience
CISSP is ideal for those working in positions such as but not limited to:

Security Consultant
Security Manager
IT Director/Manager
Security Auditor
Security Architect
Security Analyst
Security Systems Engineer
Chief Information Security Officer
Security Director
Network Architect
Course Objectives
  • Understand and apply fundamental concepts and methods related to the fields of information technology and security.
  • Align overall organizational operational goals with security functions and implementations.
  • Understand how to protect assets of the organization as they go through their lifecycle.
  • Understand the concepts, principles, structures, and standards used to design, implement, monitor, and secure operating systems, equipment, networks, applications, and those controls used to enforce various levels of confidentiality, integrity, and availability.
  • Implement system security through the application of security design principals and the application of appropriate security control mitigations for vulnerabilities present in common information system types and architectures.
  • Understand the importance of cryptography and the security services it can provide in today’s digital and information age.
  • Understand the impact of physical security elements on information system security and apply secure design principals to evaluate or recommend appropriate physical security protections.
  • Understand the elements that comprise communication and network security coupled with a thorough description of how the communication and network systems function.
  • List the concepts and architecture that define the associated technology and implementation systems and protocols at Open Systems Interconnection (OSI) model layers 1–7.
  • Identify standard terms for applying physical and logical access controls to environments related to their security practice.
  • Appraise various access control models to meet business security requirements.
  • Name primary methods for designing and validating test and audit strategies that support business requirements.
  • Enhance and optimize an organization’s operational function and capacity by applying and utilizing appropriate security controls and countermeasures.
  • Recognize risks to an organization’s operational endeavors, and assess specific threats, vulnerabilities, and controls.
  • Understand the System Lifecycle (SLC) and the Software Development Lifecycle (SDLC) and how to apply security to it, and identify which security control(s) are appropriate for the development environment, and assess the effectiveness of software security.


Course Prerequisites

Candidates must have a minimum of 5 years cumulative paid work experience in 2 or more of the 8 domains of the CISSP CBK.Earning a 4-year college degree or regional equivalent or an additional credential from the (ISC) approved list will satisfy 1 year of the required experience. Education credit will only satisfy 1 year of experience.

A candidate that doesn’t have the required experience to become a CISSP may become an Associate of (ISC) by successfully passing the CISSP examination. The Associate of (ISC) will then have 6 years to earn the 5 years required experience. You can learn more about CISSP experience requirements and how to account for part-time work and internships at www.isc2.org/Certifications/CISSP/experience-requirements.


Expected Accomplishments
After completing this course, the student will be able to:
  • Understand and apply fundamental concepts and methods related to the fields of information technology and security
  • Align overall organizational operational goals with security functions and implementations
  • Understand how to protect assets of the organization as they go through their lifecycle
  • Understand the concepts, principles, structures and standards used to design, implement, monitor and secure operating systems, equipment, networks, applications and those controls used to enforce various levels of confidentiality, integrity and availability
  • Implement system security through the application of security design principles and application of appropriate security control mitigations for vulnerabilities present in common information system types and architectures
  • Understand the importance of cryptography and the security services it can provide in today’s digital and information age
  • Understand the impact of physical security elements on information system security and apply secure design principles to evaluate or recommend appropriate physical security protections
  • Understand the elements that comprise communication and network security coupled with a thorough description of how the communication and network systems function
  • List the concepts and architecture that define the associated technology and implementation systems and protocols at Open Systems Interconnection (OSI) model layers 1-7
  • Identify standard terms for applying physical and logical access controls to environments related to their security practice
  • Appraise various access control models to meet business security requirements
  • Name primary methods for designing and validating test and audit strategies that support business requirements
  • Enhance and optimize an organization’s operational function and capacity by applying and utilizing appropriate security controls and countermeasures
  • Recognize risks to an organization’s operational endeavors and assess specific threats, vulnerabilities and controls
  • Understand the System Lifecycle (SLC) and the Software Development Lifecycle (SDLC) and how to apply security to it; identify which security control(s) are appropriate for the development environment; and assess the effectiveness of software security
Course Outline
Domain 1: Security and Risk Management

1.1 Understand and apply concepts of confidentiality, integrity and availability 
1.2 Evaluate and apply security governance principles 
1.3 Determine compliance requirements
1.4 Understand legal and regulatory issues that pertain to information security in a global context
1.5 Understand, adhere to, and promote professional ethics
1.6 Develop, document, and implement security policy, standards, procedures, and guidelines
1.7 Identify, analyze, and prioritize Business Continuity (BC) requirements 
1.8 Contribute to and enforce personnel security policies and procedures
1.9 Understand and apply risk management concepts 
1.10 Understand and apply threat modeling concepts and methodologies 
1.11 Apply risk-based management concepts to the supply chain  
1.12 Establish and maintain a security awareness, education, and training program

Domain 2: Asset Security 

2.1 Identify and classify information and assets
2.2 Determine and maintain information and asset ownership
2.3 Protect privacy
2.4 Ensure appropriate asset retention 
2.5 Determine data security controls
2.6 Establish information and asset handling requirements

Domain 3: Security Architecture and Engineering

3.1 Implement and manage engineering processes using secure design principles
3.2 Understand the fundamental concepts of security models 
3.3 Select controls based upon systems security requirements
3.4 Understand security capabilities of information systems (e.g., memory protection, Trusted Platform Module (TPM), encryption/decryption)
3.5 Assess and mitigate the vulnerabilities of security architectures, designs, and solution  
3.6 Assess and mitigate vulnerabilities in web-based systems 
3.7 Assess and mitigate vulnerabilities in mobile systems
3.8 Assess and mitigate vulnerabilities in embedded devices
3.9 Apply cryptography
3.10 Apply security principles to site and facility design
3.11 Implement site and facility security controls

Domain 4: Communication and Network Security
4.1 Implement secure design principles in network architectures 
4.2 Secure network components
4.3 Implement secure communication channels according to design

Domain 5: Identity and Access Management (IAM)
5.1 Control physical and logical access to assets
5.2 Manage identification and authentication of people, devices, and services
5.3 Integrate identity as a third-party service
5.4 Implement and manage authorization mechanisms
5.5 Manage the identity and access provisioning lifecycle

Domain 6:Security Assessment and Testing 
 
6.1 Design and validate assessment, test, and audit strategies
6.2 Conduct security control testing
6.3 Collect security process data (e.g., technical and administrative)
6.4 Analyze test output and generate report
6.5 Conduct or facilitate security audits

Domain 7: Security Operations 
7.1 Understand and support investigations
7.2 Understand requirements for investigation types
7.3 Conduct logging and monitoring activities
7.4 Securely provisioning resources 
7.5 Understand and apply foundational security operations concepts
7.6 Apply resource protection techniques
7.7 Conduct incident management 
7.8 Operate and maintain detective and preventative measures
7.9 Implement and support patch and vulnerability management
7.10 Understand and participate in change management processes
7.11 Implement recovery strategies
7.12 Implement Disaster Recovery (DR) processes 
7.13 Test Disaster Recovery Plans (DRP) ? Assessment
7.14 Participate in Business Continuity (BC) planning and exercises
7.15 Implement and manage physical security 
7.16 Address personnel safety and security concerns 

Domain 8: Software Development Security

8.1 Understand and integrate security in the Software Development Life Cycle (SDLC) 
8.2 Identify and apply security controls in development environments
8.3 Assess the effectiveness of software security
8.4 Assess security impact of acquired software
8.5 Define and apply secure coding guidelines and standards

More details on  https://www.isc2.org/-/media/ISC2/Certifications/Exam-Outlines/CISSP-Exam-Outline-2018-v718.ashx?la=en&hash=0DE0D0E850492C0E40C9DFFE332185FB20B05856