CISSP Certification Training

What is CISSP?
CISSP Objectives
CISSP Domains
Benefits of CISSP 
CISSP Certification Requirements 

Confidentiality, integrity and availability
Security governance principles
Legal and regulatory Issues
Business continuity requirements
Policies, standards, procedures, and guidelines
Risk management concepts
Threat modeling
Types of Intellectual Property (IP) Law
Introduction to Risk Analysis
Importance of Business Continuity Planning

Aligning security and risk to organizational objectives

Evaluate and apply security governance principles
Implement policies, standards and procedures
Applying compliance

Applying risk management concepts

Assessing threats and vulnerabilities
Performing risk analysis and control
Defining qualitative and quantitative analysis

Preserving the business

Adhering to Business Continuity Management Code of Practice and Specifications
Performing a business impact analysis

Asset Security

Data classification
Data Quality Assurance and Quality Control
Limitation on collection of sensitive data
Media Resource Protection
Data Remanence
Equipment Lifecycle
Standards Selection Critical Security Control

Examining security models and frameworks

The Information Security Triad and multi-level models
Investigating industry standards: ISO 27001/27002
Evaluating security model fundamental concepts

Exploring system and component security concepts

Certification and accreditation criteria and models
Reviewing mobile system/cloud/IoT vulnerabilities

Protecting information by applying cryptography

Detailing symmetric and asymmetric encryption systems
Ensuring message integrity through hashing
Uncovering threats to cryptographic systems

Security Engineering

Secure design principles
Controls and countermeasures
Virtualization
Trusted platform module
Mainframes and Other Thin Client Systems
Database security
Cloud Computing
Multilevel Security Models
Information Technology Security Evaluation Criteria
The Internet of Things
 DES Operation Modes Electronic Code Book
Cryptography Methods Transposition Ciphe

Network architecture
OSI model
TCP/IP
Mutilayer protocols
Storage protocols
Voiceover IP
Software-defined networks
Content distribution networks
Remote meeting technology
Telecommuting
Remote access and VPN
Host-to-Host Layer and Application Layer
Types of IP Addressing
Flavors of LAN transmission methods
IEEE Wireless Standards and Spread-Spectrum Technologies

Physical and logical access
Multi-factor authentication
SSO Technologies
Accountability
Types of Biometrics
Session management
Credential management
Third-party identity services
Types of Access Control Administration
Unauthorized Disclosure of Information
Identification Authentication and Authorization

Security Assessment

Assessment and test strategies
Security control testing
Security testing strategies
Risk Evaluation and Control
Internal and third-party audits 
Reasons to Use Synthetic Transactions
Code Review and Testing
Common Software Vulnerabilities
Leveraging the role of testing and auditing to analyze the effectiveness of security controls
Differentiating detection and protection systems

Security Operations

Investigations
Operational, criminal, civil, and regulatory investigations
Operating and Maintaining Preventive Measures
Logging and Monitoring Activities
Provisioning
Threats to Operations
Security Measurements, Metrics, and Reporting
Incident management
Forensic Investigation Guidelines
Honeypots and honeynets
Vulnerability management
Change management processes
Recovery strategies
Disaster recovery processes
Cloud and Virtual Storage Security Issues