CISSP – Certification Training

About the Course

Pre-Requisite

To apply for the CISSP course certification, you need to:

Have a minimum 5 years of cumulative paid full-time work experience in two or more of the 8 domains of the (ISC)² CISSP Common Body of Knowledge (CBK)

One-year experience waiver can be earned with a 4-year college degree, or regional equivalent or additional credential from the (ISC)² approved list

Exam format

Duration: 3 Hours
Number of questions: 150
Question format: Multiple Choice
Passing marks: 700 out of 1000
Exam language: English, French, German, Brazilian, Portuguese, Spanish, Japanese, Simplified Chinese, Korean, Visually Impaired
Delivery method: CAT (Computer Adaptive Testing)

CISSP Course Objectives

After completion of the CISSP training course, participants will be able to:

Understand and implement fundamental concepts related to IT security
Line up organizational goals with the security functions and implementations
Protect valuable assets of the organization
Understand the concepts, principles, structure, and standards to implement, design, monitor, and secure operating systems, networks, applications, and those control necessary for maintaining CIA triad
Understand the significance of cryptography in providing security services in the modern world
Understand physical security elements and implement appropriate physical security protection measures
Understand the concept of communication and network security
Apply physical and logical access controls, Interpret various access controls models necessary for business security. Design test or audit strategies that facilitate the business environment, Optimize operational capacity of an organization by deploying appropriate security countermeasure. Identify potential risks or assess specific threats, vulnerabilities, and controls, comprehend and protect System Lifecycle (SLC) and Software Development Lifecycle (SDLC)

Curriculum for Certified Information Systems Security Professional (CISSP®) – Certification Training

Introduction

Introduction to CISSP, ISACA, and Course
Certification Guide, Instructor, Participant introduction and Set expectation by participant

Security and Risk Management

Information Security Management
Security Controls
Information Security Management and Governance
Goals, Mission, and Objectives
Due Care
Security Policy
Compliance
Computer Crimes
Legal Systems
Intellectual Property (IP) Law
Privacy
General Data Protection Regulation
Security
Risk Analysis
Types of Risk Analysis
Security Control Assessment
Threat Modeling
Supply-Chain Risk Management
Third-Party Management
Business Continuity Planning
Business Continuity Planning Phases
Managing Personnel Security
Security Awareness Training
Program Effectiveness Evaluation

Asset Security

Information Classification
Data Classification
Data Life Cycle
Data Management
Different Roles
Data Remanence
Privacy
States of Data
Data Loss Prevention

Security Engineering

Security Architecture
Security Models
Evaluation Criteria
System Security
CPU
Memory
Security Mode
Cloud Computing
IOT
Industrial Control System (ICS)
Cryptography
Encryption Methods
DES
Asymmetric Cryptography
Public Key Infrastructure
Cryptanalysis
Key Management
Critical Path Analysis
Site Location
Fire
HVAC

Communications and Network Security

Network Architecture and Design
IP Addressing
Network Protocols
Transmission Media
Firewall
Intrusion Detection System and Intrusion Prevention System
Network Access Control (NAC)
Content Delivery Network (CDN)
Networks
Software-Defined Networking (SDN)
Remote Access
Internet Security Protocol (IPsec)
Voice over Internet Protocol (VoIP)
Phreaking
Secure Access Protocols
Wireless Technologies
Network Attacks

Identity and Access Management

Identity Management
Biometrics
Passwords
Tokens
Memory Cards and Smart Cards
Access and Authorization Concepts
Identity Management Implementation
Kerberos
Access Control Types
Access Control Models
Access Control Tools and Techniques
Accountability
Access Control Monitoring
Identity Proofing
Markup Languages
Identity as a Service (IDaaS)

Security Assessment and Testing

Security Assessment
Vulnerability Assessment
Penetration Testing
Audits
Log Management
Synthetic Transaction and Real Transaction
Testing
Software Testing
Interface
Key Performance Indicators (KPI)

Security Operations

Investigation
Forensic Investigation
Evidence
Electronic Discovery
Incident Management
Security Operations Management
Identity and Access Management
Assets
Malware
Management
Recovery and Backup
Disaster Recovery
Perimeter Security

Software Development Security

Importance of Software Development Security
Programming Concepts
Systems Development Life Cycle
Application Program Interface
Software Security and Assurance
Database and Data Warehouse Environments
Knowledge Management
Web Application Environment
Security Threats and Attacks