Course Outline
Security and Risk Management
- Principles of confidentiality, integrity, and availability (CIA)
- Security governance, policies, and frameworks (ISO 27001, NIST CSF)
- Risk analysis, evaluation, and mitigation strategies
- Business impact analysis, security awareness, and training programs
- Legal regulations, compliance, and privacy matters (GDPR, HIPAA, local laws)
Asset Security
- Information classification, ownership, and safeguarding
- Data management practices (retention, deletion, backup, transfer)
- Privacy safeguards and data lifecycle administration
- Secure utilization of assets and media controls
Security Engineering
- Principles of secure system and architecture design
- Cryptography: symmetric, asymmetric, hashing, PKI, and key management
- Physical security aspects and hardware security modules (HSMs)
- Secure virtualization, cloud-native security patterns, and secure API utilization
Communications and Network Security
- Network models, protocols, and secure communications (TLS, VPN, IPSec)
- Perimeter defenses, segmentation, firewalls, and IDS/IPS
- Wireless security, remote access, and zero-trust network architectures
- Secure network architecture design in cloud and hybrid environments
Identity and Access Management (IAM)
- Access control: identification, authentication, authorization, and accountability
- Identity providers, federation, SSO, and access federation in the cloud
- Privileged access management (PAM) and role-based access control (RBAC)
- Identity lifecycle management: provisioning, deprovisioning, and entitlement reviews
Security Assessment and Testing
- Testing security controls: SAST, DAST, penetration testing, and vulnerability scanning
- Audit methodologies and review frameworks
- Log management, monitoring, and continuous assessment
- Red teaming, blue teaming, and adversary simulation techniques
Security Operations
- Incident response planning, management, and forensics
- Security operations center (SOC) design, monitoring, and threat intelligence integration
- Patching, vulnerability management, and configuration administration
- Business continuity, disaster recovery, and resilience planning
Software Development Security
- Secure software lifecycle (SDLC) and DevSecOps practices
- Common vulnerabilities (extending beyond OWASP Top 10) and mitigation patterns
- Code review, static/dynamic analysis, and secure frameworks
- Supply chain risks, dependency management, and runtime protection
Exam Strategy, Practice, and Conclusion
- CISSP exam format, question answering strategies, and time management
- Mock exams and domain-specific quizzes
- Gap analysis and personalized study plans
- Recommended resources, communities, and continuous learning pathways
Summary and Future Directions
Requirements
- A minimum of 5 years of cumulative, paid work experience in two or more (ISC)² CISSP domains or equivalent experience
- Core understanding of information security principles, networks, and software systems
- Knowledge of risk management, cryptography, and IT operations
Target Audience
- Information security professionals studying for the CISSP exam
- Security architects, managers, and consultants
- IT leaders, auditors, and governance specialists
Testimonials (7)
Being approachable and pushing us into interaction
Daniel - EY GLOBAL SERVICES (POLAND) SP Z O O
Course - CISSP - Certified Information Systems Security Professional
the topic was interesting itself and we had opportunity to discuss it with different perspectives.
Marcin - EY GLOBAL SERVICES (POLAND) SP Z O O
Course - CISSP - Certified Information Systems Security Professional
trainer competence
Evghenii - Arctic Stream
Course - CISSP - Certified Information Systems Security Professional
Good material organization and understandable instructor's English.
Ion Temciuc - Arctic Stream
Course - CISSP - Certified Information Systems Security Professional
Good material organization and understandable instructor's English.
Hanny - Arctic Stream
Course - CISSP - Certified Information Systems Security Professional
His knowledge, the way he explains and his kindness
Marcelo Martinez - EY GLOBAL SERVICES (POLAND) SP Z O O
Course - CISSP - Certified Information Systems Security Professional
I liked mix of theory and practical case example. Very good overview of each topic then going through slides.
