Course Outline
Security and Risk Management
- Core principles of confidentiality, integrity, and availability (CIA)
- Security governance, policy development, and frameworks (including ISO 27001 and NIST CSF)
- Conducting risk analysis, assessment, and mitigation strategies
- Business impact analysis, fostering security awareness, and training initiatives
- Navigating legal, regulatory, compliance, and privacy matters (such as GDPR, HIPAA, and local statutes)
Asset Security
- Information classification, ownership structures, and protection strategies
- Data management processes (retention, deletion, backup, and transfer protocols)
- Safeguarding privacy and managing the data lifecycle
- Responsible use of assets and control of media
Security Engineering
- Principles of secure system and architectural design
- Cryptographic methods: symmetric and asymmetric encryption, hashing, PKI, and key management
- Physical security factors and the use of hardware security modules (HSMs)
- Secure virtualization, cloud-native security patterns, and safe API implementation
Communications and Network Security
- Network models, protocols, and secure communication standards (TLS, VPN, IPSec)
- Perimeter protection, network segmentation, firewalls, and IDS/IPS
- Wireless security protocols, remote access controls, and zero-trust network designs
- Architecting secure networks for cloud and hybrid environments
Identity and Access Management (IAM)
- Access control mechanisms: identification, authentication, authorization, and accountability
- Identity providers, federation services, SSO, and access federation in cloud environments
- Privileged access management (PAM) and role-based access control (RBAC)
- Identity lifecycle management: provisioning, deprovisioning, and entitlement reviews
Security Assessment and Testing
- Testing security controls: SAST, DAST, penetration testing, and vulnerability scanning
- Strategic approaches to auditing and review frameworks
- Log administration, monitoring, and ongoing assessment practices
- Red teaming, blue teaming, and adversary simulation methodologies
Security Operations
- Planning, executing, and forensic aspects of incident response
- Designing security operations centers (SOC), monitoring, and integrating threat intelligence
- Managing patches, vulnerability remediation, and configuration standards
- Business continuity, disaster recovery, and resilience planning
Software Development Security
- Secure software development life cycle (SDLC) and DevSecOps methodologies
- Addressing common vulnerabilities (extending beyond the OWASP Top 10) and mitigation techniques
- Code reviews, static/dynamic analysis, and leveraging secure frameworks
- Managing supply chain risks, dependency handling, and runtime protections
Exam Strategy, Practice, and Conclusion
- Understanding the CISSP exam structure, question tactics, and time management
- Utilizing practice exams and domain-specific quizzes for reinforcement
- Performing gap analysis and developing personalized study plans
- Exploring recommended resources, professional communities, and continuous learning pathways
Summary and Future Steps
Requirements
- A minimum of five years of cumulative, compensated professional experience in at least two (ISC)² CISSP domains, or comparable background
- Solid understanding of core information security principles, networking, and software systems
- Working knowledge of risk management, cryptographic principles, and IT operational processes
Target Audience
- Information security specialists actively preparing for the CISSP examination
- Security architects, managers, and consulting professionals
- IT executives, auditors, and governance-focused professionals
Testimonials (7)
Being approachable and pushing us into interaction
Daniel - EY GLOBAL SERVICES (POLAND) SP Z O O
Course - CISSP - Certified Information Systems Security Professional
the topic was interesting itself and we had opportunity to discuss it with different perspectives.
Marcin - EY GLOBAL SERVICES (POLAND) SP Z O O
Course - CISSP - Certified Information Systems Security Professional
trainer competence
Evghenii - Arctic Stream
Course - CISSP - Certified Information Systems Security Professional
Good material organization and understandable instructor's English.
Ion Temciuc - Arctic Stream
Course - CISSP - Certified Information Systems Security Professional
Good material organization and understandable instructor's English.
Hanny - Arctic Stream
Course - CISSP - Certified Information Systems Security Professional
His knowledge, the way he explains and his kindness
Marcelo Martinez - EY GLOBAL SERVICES (POLAND) SP Z O O
Course - CISSP - Certified Information Systems Security Professional
I liked mix of theory and practical case example. Very good overview of each topic then going through slides.
