Cybersecurity threats don't wait for organisations to catch up, and neither does the hiring market for people who can prove they know how to defend against them. Among information security certifications, CISSP stands out globally as the benchmark credential – built around eight domains that cover everything from governance and risk to software security, and demanding a genuinely deep understanding of how to design, implement and manage a cybersecurity program.

This Training Course in CISSP Certification Exam Preparation, delivered by the Arab British Fellowship Training Academy, walks participants through all eight domains of the CISSP Common Body of Knowledge (CBK) in depth, combining security principles, risk management strategies and hands-on technical know-how so they walk into the exam – and into their organisation – fully prepared.

Who Should Attend?

• Information security managers and directors.
• IT professionals aiming to advance their careers in cybersecurity.
• Network security engineers and professionals.
• IT auditors and risk management professionals.
• Consultants involved in cybersecurity and information systems, and anyone seeking the CISSP credential.

Knowledge and Benefits:

By the end of the course, participants will be able to:

• Explain all eight domains of the CISSP CBK in depth, and walk into the certification exam well prepared.
• Implement, manage and assess security policies and procedures.
• Apply risk management principles across a real cybersecurity programme.
• Protect organisational information and mitigate security risks using advanced, practical skills.

• Module 1: Why CISSP, and Domain 1 – Security and Risk Management
  • What CISSP is, its significance in the field, and the requirements for certification.
  • The CISSP Code of Ethics and information security governance, including how governance aligns with business goals.
  • Compliance and legal considerations (e.g. GDPR, HIPAA), plus risk assessment, mitigation and business continuity planning.
• Module 2: Domain 2 – Asset Security
  • Classifying and handling information assets, and protecting sensitive data.
  • Asset management policies, and physical and logical access controls.
  • The data security lifecycle, from creation to secure disposal.
• Module 3: Domain 3 – Security Architecture and Engineering
  • Key security models (Bell-LaPadula, Biba, Clark-Wilson) and designing secure system architectures.
  • Cryptography fundamentals, algorithms and protocols.
  • Security in network design, including the role of firewalls, VPNs and intrusion detection systems.
• Module 4: Domain 4 – Communication and Network Security
  • Network security fundamentals and identifying vulnerabilities.
  • Common security protocols (IPsec, SSL/TLS) and securing wireless and remote access.
  • Designing and segmenting secure network infrastructure, plus traffic monitoring.
• Module 5: Domain 5 – Identity and Access Management (IAM)
  • Access control models: role-based (RBAC) and attribute-based (ABAC), plus multi-factor authentication and SSO.
  • Identity management technologies (LDAP, Active Directory) and user lifecycle management.
  • Least-privilege strategies, and monitoring and auditing access control systems.
• Module 6: Domain 6 – Security Assessment and Testing
  • Vulnerability assessments, penetration testing and risk-based testing approaches.
  • Vulnerability scanning best practices, and post-assessment reporting and remediation.
  • Continuous monitoring and Security Information and Event Management (SIEM) systems.
• Module 7: Domain 7 – Security Operations
  • Principles of running secure, resilient operations, and handling security breaches.
  • Incident response planning, crisis management and post-incident analysis.
  • Security operations centres (SOCs) and real-time threat monitoring.
• Module 8: Domain 8 – Software Development Security
  • Security considerations across the Secure Software Development Lifecycle (SDLC).
  • Common application vulnerabilities (SQL injection, cross-site scripting) and how to mitigate them.
  • Automated vulnerability detection, threat modelling and secure patching techniques.
• Module 9: Final Review, Exam Strategy and Continued Growth
  • Recap of the eight CISSP domains and the areas that need the most focus.
  • Time management and practical strategies for exam day, with sample questions.
  • Open Q&A on remaining doubts, and strategies for continuous learning in cybersecurity.