Topics:
DOMAIN 1: SECURITY AND RISK MANAGEMENT
- Introduction
- Overview of ISC2 and CISSP Exam
- Pre-Assessment
- Understand, Adhere to, and Promote Professional Ethics
- Understand and Apply Security Concepts
- Evaluate and Apply Security Governance Principles
- Determine Compliance and Other Requirements
- Understand Legal and Regulatory Issues That Pertain to Information Security in a Holistic Context
- Understand Requirements for Investigation Types
- Develop, Document, and Implement Security Policy, Standards, Procedures, and Guidelines
- Identify, Analyze, and Prioritize Business Continuity Requirements
- Contribute to and Enforce Personnel Security Policies and Procedures
- Understand and Apply Risk Management Concepts
- Understand and Apply Threat Modeling Concepts and Methodologies
- Apply Supply Chain Risk Management Concepts
- Establish and Maintain a Security Awareness, Education, and Training Program
- Domain 1 Assessment
- DOMAIN 2: ASSET SECURITY
- Identify and Classify Information and Assets
- Establish Information and Asset Handling Requirements
- Provision Resources Securely
- Manage Data Lifecycle
- Ensure Appropriate Asset Retention
- Determine Data Security Controls and Compliance Requirements
- Domain 2 Assessment
- Research, Implement, and Manage Engineering Processes Using Secure Design Principles
- Understand the Fundamental Concepts of Security Models
- Select Controls Based Upon Systems Security Requirements
- Understand Security Capabilities of Information Systems
- Assess and Mitigate the Vulnerabilities of Security Architectures, Designs, and Solution Elements
- Select and Determine Cryptographic Solutions
- DOMAIN 4: COMMUNICATION AND NETWORK SECURITY
- Understand Methods of Cryptanalytic Attacks
- Apply Security Principles to Site and Facility Design
- Design Site and Facility Security Controls
- Domain 3 Assessment
- Assess and Implement Secure Design Principles in Network Architectures
- Secure Network Components
- DOMAIN 5: IDENTITY AND ACCESS MANAGEMENT
- Implement Secure Communication Channels According to Design
- Domain 4 Assessment
- Control Physical and Logical Access to Assets
- Manage Identification and Authentication of People, Devices, and Services
- Federated Identity with a Third-Party Service
- Implement and Manage Authorization Mechanisms
- Manage the Identity and Access Provisioning Lifecycle
- Implement Authentication Systems
- Domain 5 Assessment
- Design and Validate Assessment, Test, and Audit Strategies
- Conduct Security Control Testing
- Collect Security Process Data
- Analyze Test Output and Generate Report
- Conduct or Facilitate Security Audits
- Domain 6 Assessment
- DOMAIN 7: SECURITY OPERATIONS
- Understand and Comply with Investigations
- Conduct Logging and Monitoring Activities
- Perform Configuration Management
- Apply Foundational Security Operations Concepts
- Apply Resource Protection
- Conduct Incident Management
- Operate and Maintain Detective and Preventative Measures
- Implement and Support Patch and Vulnerability Management
- DOMAIN 8: SOFTWARE DEVELOPMENT SECURITY
- Understand and Participate in Change Management Processes
- Implement Recovery Strategies
- Implement Disaster Recovery Processes
- Test Disaster Recovery Plans
- Participate in Business Continuity Planning and Exercises
- Implement and Manage Physical Security
- Address Personnel Safety and Security Concerns
- Domain 7 Assessment
- Understand and Integrate Security in the Software Development Life Cycle (SDLC)
- Identify and Apply Security Controls in Software Development Ecosystems
- Assess the Effectiveness of Software Security
- Assess Security Impact of Acquired Software
- Define and Apply Secure Coding Guidelines and Standards
- Recap & Exam Preparation
- Discussion of Practice Questions - CISSP exam point of view
Certification:
We will provide a Course Completion Certificate titled “Course in Enterprise Information Systems Security - Advanced Certification.”
