Course Outline
1 - Security and Risk Management
- Topic A: Security Concepts
- Topic B: Security Governance Principles
- Topic C: Compliance
- Topic D: Professional Ethics
- Topic E: Security Documentation
- Topic F: Risk Management
- Topic G: Threat Modeling
- Topic H: Risk Response
- Topic I: Business Continuity Plan Fundamentals
- Topic J: Acquisition Strategy and Practice
- Topic K: Personnel Security Policies
- Topic L: Security Awareness and Training
2 - Asset Security
- Topic A: Asset Classification
- Topic B: Secure Data Handling
- Topic C: Resource Provisioning and Protection
- Topic D: Manage Data Lifecycle
- Topic E: Asset Retention
- Topic F: Data Security Control
3 - Security Architecture and Engineering
- Topic A: Security in the Engineering Lifecycle
- Topic B: System Component Security
- Topic C: Security Models
- Topic D: Controls and Countermeasures in Enterprise Security
- Topic E: Information System Security Capabilities
- Topic F: Design and Architecture Vulnerability Mitigation
- Topic G: Vulnerability Mitigation in Emerging Technologies
- Topic H: Cryptography Concepts
- Topic I: Cryptography Techniques
- Topic J: Cryptanalytic Attacks
- Topic K: Site and Facility Design for Physical Security
- Topic L: Physical Security Implementation in Sites and Facilities
4 - Communication and Network Security
- Topic A: Network Protocol Security
- Topic B: Network Components Security
- Topic C: Communication Channel Security
- Topic D: Network Attack Mitigation
5 - Identity and Access Management
- Topic A: Physical and Logical Access Control
- Topic B: Identification and Authentication
- Topic C: Identity as a Service
- Topic D: Authorization Mechanisms
- Topic E: Access Control Attack Mitigation
6 - Security Assessment and Testing
- Topic A: System Security Control Testing
- Topic B: Software Security Control Testing
- Topic C: Security Process Data Collection
- Topic D: Audits
7 - Security Operations
- Topic A: Security Operations Concepts
- Topic B: Change Management
- Topic C: Physical Security
- Topic D: Personnel Security
- Topic E: Detective and Preventive Measures
- Topic F: Patch and Vulnerability Management
- Topic G: Logging and Monitoring
- Topic H: Incident Response
- Topic I: Investigations
- Topic J: Disaster Recovery Planning
- Topic K: Disaster Recovery Strategies
- Topic L: Disaster Recovery Implementation
8 - Software Development Security
- Topic A: Security Principles in the System Lifecycle
- Topic B: Security Principles in the Software Development Lifecycle
- Topic C: Security Controls in the Development Environment
- Topic D: Database Security in Software Development
- Topic E: Software Security Effectiveness Assessment
Target Audience
This course is intended for experienced IT security-related practitioners, auditors, consultants, investigators, or instructors, including network or security analysts and engineers, network administrators, information security specialists, and risk management professionals, who are pursuing CISSP training and certification to acquire the credibility and mobility to advance within their current computer security careers or to migrate to a related career. Through the study of all eight CISSP CBK domains, students will validate their knowledge by meeting the necessary preparation requirements to qualify to sit for the CISSP certification exam. Additional CISSP certification requirements include a minimum of five years of direct professional work experience in two or more fields related to the eight CBK security domains, or a college degree and four years of experience.