COURSE OVERVIEW

 

This practical and highly-interactive course includes real-life case studies and exercises where participants will be engaged in a series of interactive small groups and class workshops. 

 

This course is designed to provide participants with a detailed and up-to-date overview of certified information system security professional (CISSP). It covers the security and risk management and professional ethics; the security concepts and security governance principles; the compliance, other requirements and legal and regulatory issues that pertain to information security in a holistic context; the requirements for investigation types; develop, document, and implement security policy, standards, procedures and guidelines; the business continuity (BC) requirements; the personnel security policies and procedures; and risk management concepts and threat modeling concepts; and the methodologies and supply chain risk management (SCRM) concepts. 

 

Further, the course will also discuss the security awareness, education and training program; the information and assets, establishing information and asset handling requirements; managing data lifecycle; the appropriate asset retention and data security controls and compliance requirements; the security architecture and engineering; researching, implementing and managing engineering processes using secure design principles; and the cryptographic solutions and security principles to site and facility. 

 

During this interactive course participants will learn the design principles in network architectures, secure network components and secure communication channels according to design; identifying and accessing management, controlling physical and logical access to assets and managing identification and authentication; the authorization mechanisms and authentication systems; designing and validating assessment, test, and audit strategies; conducting security control testing and collecting security process data; testing output and generating report; conducting or facilitating security audits and complying with investigations; logging and monitoring activities and configuration management; the foundational security operations concepts, resource protection and incident management; operating and maintaining detective and preventative measures; the change management, recovery strategies and disaster recovery process; testing disaster recovery plans, participating in business continuity planning, managing physical security and addressing personnel safety and security concerns; and the software development security, security control and coding guidelines and standards.