Our accelerated CISSP course is the fastest and most cost-effective way to be trained and certified in.

We have constructed our course material in a way that best prepares you for your CISSP exam, which you will take during the course.

You will cover the following material:

Access Control

Access controls are a collection of mechanisms that work together to create a security architecture to protect the assets of the information system.

• Concepts/methodologies/techniques
• Effectiveness
• Attacks

Telecommunications, Network, and Internet Security

The telecommunications, network, and Internet security domain discusses the:

• Network Structures
• Transmission methods
• Transport formats
• Security measures used to provide availability, integrity, and confidentiality
• Authentication for transmissions over private and public communications networks and media

Information Security and Risk Management

Security management entails the identification of an organisation's information assets and the development, documentation, and implementation of policies, standards, procedures, and guidelines.

Management tools such as data classification and risk assessment/analysis are used to identify threats, classify assets, and to rate system vulnerabilities so that effective controls can be implemented.

• Security governance and policy
• Information classification/ownership
• Contractual agreements and procurement processes
• Risk management concepts
• Personnel security
• Security education, training and awareness
• Certification and accreditation

Software Development Security

This domain addresses the important security concepts that apply to application software development. It outlines the environment where software is designed and developed and explains the critical role software plays in providing information system security.

• SDLC (Systems development life cycle)
• Application environment and security controls
• Effectiveness of application security

Cryptography

The cryptography domain addresses the principles, means, and methods of disguising information to ensure its integrity, confidentiality and authenticity.

• Encryption concepts
• Digital signatures
• Cryptanalytic attacks
• PKI (Public Key Infrastructure)
• Information hiding alternatives

Security Architecture and Design

The Security Architecture and Design domain contains the concepts, principles, structures, and standards used to design, monitor, and secure operating systems, equipment, networks, applications and those controls used to enforce various levels of availability, integrity, and confidentiality.

• Fundamental concepts of security models
• Capabilities of information systems (e.g. memory protection, virtualization)
• Countermeasure principles
• Vulnerabilities and threats (e.g. cloud computing, aggregation, data flow control)

Operations Security

Operations Security is used to identify the controls over hardware, media, and the operators and administrators with access privileges to any of these resources. Audit and monitoring are the mechanisms, tools, and facilities that permit the identification of security events and subsequent actions to identify the key elements and report the pertinent information to the appropriate individual, group, or process.

• Resource protection
• Incident response
• Attack prevention and response
• Patch and vulnerability management

Business Continuity and Disaster Recovery Planning

The Business Continuity Plan (BCP) domain addresses the preservation and recovery of business operations in the event of outages.

• Business impact analysis/li>
• Recovery strategy
• Disaster recovery process
• Provide training

Law, Regulations, Investigations and Compliance

Addresses computer crime laws and regulations; the investigative measures and techniques which can be used to determine if a crime has been committed and methods to gather evidence.

• Computer crime laws and regulations
• The measures and technologies used to investigate computer crime incidents
• Legal issues
• Forensic procedures
• Compliance requirements/procedures

Physical (Environmental) Security

The Physical (Environmental) Security domain provides protection techniques for the entire facility, from the outside perimeter to the inside office space, including all of the information system resources.

• Site/facility design considerations
• Perimeter security
• Internal security
• Facilities security

Read more ...