Building an Enterprise Security Mindset: Preparing for the CISSP Certification (Online / Remote)
1Summary
Almost every major breach traces back to a gap somewhere in an organisation's security architecture: a control that was never designed, a process that was never tested, an access right nobody reviewed. The professionals organisations trust to catch these gaps before attackers do are the ones holding the Certified Information Systems Security Professional (CISSP) credential, issued by the International Information Systems Security Certification Consortium (ISC), and recognised worldwide as the standard for information security expertise.
This course from the Arab British Fellowship Training Academy prepares participants across the full range of CISSP knowledge areas, from governance and risk to architecture, network security, identity management and secure software development, building the depth needed to design, build and defend a secure business environment using globally recognised standards.
2Objectives and target group
Who Should Attend?
- Chief information security officers and directors of security.
- IT directors and managers, and security systems engineers.
- Security analysts, auditors, architects and consultants.
- Network architects and anyone looking to build their capabilities in information security.
Programme Objectives
- Apply access control systems and their underlying methodology.
- Secure application and systems development, and understand security architecture and models.
- Implement business continuity and disaster recovery planning.
- Understand cryptography and how it is applied in practice.
- Handle security management practices, operations, and physical security.
- Understand telecommunications and networking security.
- Apply the law, investigation procedures and ethics relevant to information security.
3Course Content
Module 1: What CISSP Is and Why It Matters
- What the CISSP certification is, and its goals
- The value of the security professional certification
- An overview of the knowledge domains the exam covers
Module 2: Security and Risk Management
- Security governance and policies
- Legal regulations, compliance, and information security governance
- Security awareness, training and education
Module 3: Asset Security
- Physical and environmental security
- Information classification and ownership
- Physical security threats and countermeasures
Module 4: Security Architecture and Engineering
- Security models, frameworks and system architecture design principles
- Security capabilities of information systems, and controls for hardware, software and networks
- Cryptographic concepts, symmetric and asymmetric encryption
- Public key infrastructure (PKI), and cryptographic protocols and applications
Module 5: Communication and Network Security
- Network architecture and protocols
- Secure network components, devices and communication channels
- Network attacks and countermeasures
- Telecommunications and networking security
Module 6: Identity and Access Management (IAM)
- Access control models and techniques
- Identification and authentication mechanisms
- Authorization, accountability, and the identity and access provisioning lifecycle
Module 7: Security Assessment and Testing
- Security assessment methodologies
- Vulnerability assessment and management
- Penetration testing and ethical hacking
- Testing and assuring security controls
Module 8: Security Operations
- Security operations management, and incident response
- Disaster recovery planning and business continuity planning
- Cyber defense infrastructure support and cybersecurity management
Module 9: Software Development Security
- Secure software development lifecycle
- Software security testing and verification
- Secure coding, deployment and maintenance practices
Module 10: Exam Readiness and Applied Practice
- Common CISSP exam challenges and how to approach them
- Practical workshops applying the domains to real security scenarios