Welcome to Certified Information Systems Security Professional (CISSP)®: Fifth Edition.
With your completion of the prerequisites and necessary years of experience, you are firmly
grounded in the knowledge requirements of today’s security professional. This course will
expand upon your knowledge by addressing the essential elements of the eight domains that
comprise a Common Body of Knowledge (CBK)® for information systems security
professionals. The course offers a job-related approach to the security process, while
providing a framework to prepare for CISSP certification
CISSP is the premier certification for today’s information systems security professional.
It remains the premier certification because the sponsoring organization, the International
Information Systems Security Certification Consortium, Inc. (ISC)2 ®, regularly updates the
test by using subject matter experts (SMEs) to make sure the material and the questions are
relevant in today’s security environment. By defining eight security domains that comprise
a CBK, industry standards for the information systems security professional have been
established. The skills and knowledge you gain in this course will help you master the eight
CISSP domains and ensure your credibility and success within the information systems
security field.
In this course, you will identify and reinforce the major security subjects from the eight
domains of the (ISC)2 CISSP CBK. You will:
- Analyze components of the Security and Risk Management domain.
- Analyze components of the Asset Security domain.
- Analyze components of the Security Architecture and Engineering domain.
- Analyze components of the Communications and Network Security domain.
- Analyze components of the Identity and Access Management domain.
- Analyze components of the Security Assessment and Testing domain.
- Analyze components of the Security Operations domain.
- Analyze components of the Software Development Security domain.
This course is intended for experienced IT security-related practitioners, auditors,
consultants, investigators, or instructors, including network or security analysts and
engineers, network administrators, information security specialists, and risk management
professionals, who are pursuing CISSP training and certification to acquire the credibility and
mobility to advance within their current computer security careers or to migrate to a related
career. Through the study of all eight CISSP CBK domains, students will validate their
knowledge by meeting the necessary preparation requirements to qualify to sit for the CISSPcertification exam. Additional CISSP certification requirements include a minimum of five
years of direct professional work experience in two or more fields related to the eight CBK
security domains, or a college degree and four years of experience.
Security and Risk Management
Security Governance Principles
Compliance
Professional Ethics
Security Documentation
Risk Management
Threat Modelling
Business Continuity Plan Fundamentals
Acquisition Strategy and Practice
Personnel Security Policies
Security Awareness and Training
Asset Security
Asset Classification
Privacy Protection
Asset Retention
Data Security Controls
Secure Data Handling
Security Architecture and Engineering
Security in the Engineering Lifecycle
System Component Security
Security Models
Controls and Countermeasures in Enterprise Security
Information System Security Capabilities
Design and Architecture Vulnerability Mitigation
Vulnerability Mitigation in Mobile, IoT, Embedded, and Web-Based Systems
Cryptography Concepts
Cryptography Techniques
Site and Facility Design for Physical Security
Physical Security Implementation in Sites and Facilities
Communication and Network Security
Network Protocol Security
Network Components Security
Communication Channel Security
Network Attack Mitigation
Identity and Access Management
Physical and Logical Access Control
Identification, Authentication, and Authorization
Identity as a Service
Authorization Mechanisms
Access Control Attack Mitigation
Security Assessment and Testing
System Security Control Testing
Software Security Control Testing
Security Process Data Collection
Audits
Security Operations
Security Operations Concepts
Physical Security
Personnel Security
Logging and Monitoring
Preventative Measures
Resource Provisioning and Protection
Patch and Vulnerability Management
Change Management
Incident Response
Investigations
Disaster Recovery Planning
Disaster Recovery Strategies
Disaster Recovery Implementation
Software Development Security
Security Principles in the System Lifecycle
Security Principles in the Software Development Lifecycle
Database Security in Software Development
Security Controls in the Development Environment
Software Security Effectiveness Assessment
It will be beneficial if students have one or more of the following security-related or technology-related certifications or equivalent industry experience: