CISSP Certification Training Course

• Learning goal: Build the governance, risk and compliance foundation of a security program. This domain is 16% of the CISSP exam.
• Professional ethics and the ISC2 Code of Ethics
• Core security concepts: confidentiality, integrity, availability, authenticity and nonrepudiation
• Security governance principles
• Compliance, legal and regulatory requirements
• Investigation types
• Security policies, standards, procedures and guidelines
• Business continuity requirements
• Personnel security policies
• Risk management concepts
• Threat modeling
• Supply chain risk management
• Security awareness, education and training

Learning objective: Learning goal: Classify and protect information assets, then design secure systems and choose the right cryptography. Asset Security is 10% of the exam, and Security Architecture and Engineering is 13%.

• Classifying information and assets, and handling requirements
• Provisioning resources securely and managing the data lifecycle
• Asset retention, end of life and end of support
• Data security controls and compliance
• Secure design principles and security models such as Bell-LaPadula and Biba
• Selecting controls based on system security requirements
• Security capabilities of information systems, such as memory protection and TPM
• Vulnerabilities in security architectures, designs and solution elements
• Cryptographic solutions and cryptanalytic attacks
• Site and facility design and security controls
• Managing the information system lifecycle

• Learning goal: Design and protect network architectures and communication channels. This domain is 13% of the CISSP exam.
• Secure design principles in network architectures
• Securing network components
• Implementing secure communication channels

• Learning goal: Control who and what can access your assets. This domain is 13% of the CISSP exam.
• Physical and logical access to assets
• Identification and authentication of people, devices and services
• Federated identity with third-party services
• Authorization mechanisms
• The identity and access provisioning lifecycle
• Implementing authentication systems

• Learning goal: Plan and run security assessments, tests and audits. This domain is 12% of the CISSP exam.
• Assessment, test and audit strategies
• Security control testing
• Collecting security process data
• Analyzing test output and reporting
• Running or facilitating security audits

Learning objective: Learning goal: Run day-to-day security operations and build security into the software you develop and buy. Security Operations is 13% of the exam, and Software Development Security is 10%.

• Investigations, logging and monitoring
• Configuration management and foundational security operations concepts
• Resource protection and incident management
• Detective and preventive measures
• Patch, vulnerability and change management
• Recovery strategies, disaster recovery and business continuity exercises
• Physical security and personnel safety
• Security in the software development life cycle (SDLC)
• Security controls in software development ecosystems
• Assessing software security and the security impact of acquired software
• Secure coding guidelines and standards