(ISC)2 Certified Information Systems Security Professional (CISSP)

This training course is intended for professionals who have at least five years of cumulative, paid work experience in two or more of the eight domains of the (ISC)²® CISSP CBK and are pursuing CISSP training and certification to acquire the credibility and mobility to advance within their current information security careers. Individuals may be currently in roles such as: Security Consultant; Security Manager; IT Director/Manager Security Auditor; Security Architect; Security Analyst; Security Systems Engineer; Chief Information Security Officer; Security Director; Network Architect.

After completing this course you should be able to:

• Understand and apply fundamental concepts and methods related to the fields of information technology and security
• Align overall organizational operational goals with security functions and implementations.
• Understand how to protect assets of the organization as they go through their lifecycle.
• Understand the concepts, principles, structures and standards used to design, implement, monitor and secure operating systems, equipment, networks, applications and those controls used to enforce various levels of confidentiality, integrity and availability.
• Implement system security through the application of security design principles and application of appropriate security control mitigations for vulnerabilities present in common information system types and architectures.
• Understand the importance of cryptography and the security services it can provide in today’s digital and information age.
• Understand the impact of physical security elements on information system security and apply secure design principles to evaluate or recommend appropriate physical security protections.
• Understand the elements that comprise communication and network security coupled with a thorough description of how the communication and network systems function.
• List the concepts and architecture that define the associated technology and implementation systems and protocols at Open Systems Interconnection (OSI) model layers 1-7.
• Identify standard terms for applying physical and logical access controls to environments related to their security practice.
• Appraise various access control models to meet business security requirements.
• Name primary methods for designing and validating test and audit strategies that support business requirements.
• Enhance and optimize an organization’s operational function and capacity by applying and utilizing appropriate security controls and countermeasures.
• Recognize risks to an organization’s operational endeavours and assess specific threats, vulnerabilities and controls.
• Understand the System Lifecycle (SLC) and the Software Development Lifecycle (SDLC) and how to apply security to it; identify which security control(s) are appropriate for the development environment; and assess the effectiveness of software security.

• Domain 1: Security and Risk Management
• Domain 2: Asset Security
• Domain 3: Security Architecture and Engineering
• Domain 4: Communication and Network Security
• Domain 5: Identity and Access Management (IAM)
• Domain 6: Security Assessment and Testing
• Domain 7: Security Operations
• Domain 8: Software Development Security

Certification

Recommended as preparation for the following exam:

(ISC)2 Certified Information Systems Security Professional

Gaining this accreditation is not just about passing the exam, there are a number of other criteria that need to be met including 5 years of cumulative, paid work experience in two or more of the eight domains of the (ISC)²® CISSP CBK . Full details can be found at https://www.isc2.org/cissp/default.aspx

Those without the required experience can take the exam to become an Associate of (ISC)² while working towards the experience needed for full certification.

Please note an exam voucher is included as part of this course.

DoD 8570 / 8140

Department of Defense ( DoD ) Directive 8570 / 8140 requires every full and part-time military service member, defense contractor and civilian employee with privileged access to US Department of Defense information systems (IS) to obtain industry certification credentials that have been accredited by the American National Standards Institute (ANSI).

DoD Information Assurance and Cybersecurity Personnel must be fully trained and be certified with baseline certification for their job category and level to perform their duties. The training, certification and workforce management requirements of Directive 8570 / 8140 applies to all members of the DoD IA and Cybersecurity Personnel workforces including military, civilians, local nationals, non-appropriated fund (NAF) personnel, and contractors. The requirements apply whether the duties are performed full-time, part-time, or as embedded duty.

An individual needs to obtain only one of the “approved certifications” for his or her category or specialty and level to meet the minimum requirement.