Training ISC2

Training goals

code: ISC2-CISSP

Official ISC2 CBK Training Seminar for the CISSP (Certified Information Systems Security Professional)

Official ISC2 Online Instructor-Led Training offers the structure of a classroom along with the flexibility of remote learning. Updated course content aligns with the recently refreshed CISSP exam outline and features live virtual instruction by an ISC2 Authorized Instructor, a verified security expert who holds the CISSP.

Each participant in an authorized training CISSP Certification Prep Course held in Compendium CE will receive a free CISSP Certification Exam voucher.

This course is designed for information security professionals with deep technical and managerial knowledge and experience to effectively design, engineer, and manage the overall security posture of an organization. Led by an ISC2 authorized instructor, this training seminar provides a comprehensive review of information systems security concepts and industry best practices, covering the following eight domains of the CISSP Common Body of Knowledge (CBK®)

  • Domain 1: Security and Risk Management
  • Domain 2: Asset Security
  • Domain 3: Security Architecture and Engineering
  • Domain 4: Communication and Network Security
  • Domain 5: Identity and Access Management (IAM)
  • Domain 6: Security Assessment Testing
  • Domain 7: Security Operations
  • Domain 8: Software Development Security

 

Course objectives

At the end of this course, learners will be able to:

  • Apply fundamental concepts and methods related to the fields of information technology and security.
  • Align overall organizational operational goals with security functions and implementations.
  • Determine how to protect assets of the organization as they go through their lifecycle.
  • Leverage the concepts, principles, structures, and standards used to design, implement, monitor, and secure operating systems, equipment, networks, applications, and those controls used to enforce various levels of confidentiality, integrity, and availability.
  • Apply security design principles to select appropriate mitigations for vulnerabilities present in common information system types and architectures.
  • Explain the importance of cryptography and the security services it can provide in today’s digital and information age.
  • Evaluate physical security elements relative to information security needs.
  • Evaluate the elements that comprise communication and network security relative to information security needs.
  • Leverage the concepts and architecture that define the associated technology and implementation systems and protocols at Open Systems Interconnection (OSI) model layers 1–7 to meet information security needs.
  • Determine appropriate access control models to meet business security requirements.
  • Apply physical and logical access controls to meet information security needs.
  • Differentiate between primary methods for designing and validating test and audit strategies that support information security requirements.
  • Apply appropriate security controls and countermeasures to optimize an organization’s operational function and capacity.
  • Assess information systems risks to an organization’s operational endeavors.
  • Determine appropriate controls to mitigate specific threats and vulnerabilities.
  • Apply information systems security concepts to mitigate the risk of software and systems vulnerabilities throughout the systems’ lifecycles.

 

Intended audience.

This course is for individuals planning to pursue the CISSP certification. The CISSP is intended for professionals who have a minimum of 5 years’ cumulative work experience in 2 or more of the 8 domains of the CISSP Common Body of Knowledge (CBK). Earning a 4-year college degree or regional equivalent or a recognized credential from the ISC2 approved list will satisfy 1 year of the required experience. Education credit will only satisfy 1 year of experience.

 

Prior to taking this course the learner should have the following experience, skills, or knowledge in:  obtained while serving in the following roles:

  • Chief Information Officer
  • Chief Information Security Officer
  • Chief Technology Officer
  • Compliance Manager/ Officer
  • Director of Security
  • Information Architect
  • Information Manager / Information Risk Manager or Consultant
  • IT Specialist/Director/Manager
  • Network/System Administrator
  • Security Administrator
  • Security Architect / Security Analyst
  • Security Consultant
  • Security Manager
  • Security Systems Engineer/ Security Engineer

Conspect Show list

  • The Information Security Environment
    • Justify an organizational code of ethics.
    • Relate confidentiality, integrity, availability, non-repudiation, authenticity, privacy and safety to due care and due diligence.
    • Relate information security governance to organizational business strategies, goals, missions, and objectives.
    • Apply the concepts of cybercrime to data breaches and other information security compromises.
    • Relate legal, contractual, and regulatory requirements for privacy and data protection to information security objectives.
    • Relate transborder data movement and import-export issues to data protection, privacy, and intellectual property protection.
  • Information Asset Security
    • Relate the IT asset management and data security lifecycle models to information security.
    • Explain the use of information classification and categorization, as two separate but related processes.
    • Describe the different data states and their information security considerations.
    • Describe the different roles involved in the use of information, and the security considerations for these roles.
    • Describe the different types and categories of information security controls and their use.
    • Select data security standards to meet organizational compliance requirements.
  • Identity and Access Management (IAM)
    • Explain the identity lifecycle as it applies to human and nonhuman users.
    • Compare and contrast access control models, mechanisms, and concepts.
    • Explain the role of authentication, authorization, and accounting in achieving information security goals and objectives.
    • Explain how IAM implementations must protect physical and logical assets.
    • Describe the role of credentials and the identity store in IAM systems.
  • Security Architecture and Engineering
    • Describe the major components of security engineering standards.
    • Explain major architectural models for information security.
    • Explain the security capabilities implemented in hardware and firmware.
    • Apply security principles to different information systems architectures and their environments.
    • Determine the best application of cryptographic approaches to solving organizational information security needs.
    • Manage the use of certificates and digital signatures to meet organizational information security needs.
    • Discover the implications of the failure to use cryptographic techniques to protect the supply chain.
    • Apply different cryptographic management solutions to meet the organizational information security needs.
    • Verify cryptographic solutions are working and meeting the evolving threat of the real world.
    • Describe defenses against common cryptographic attacks.
    • Develop a management checklist to determine the organization’s cryptologic state of health and readiness.
  • Communication and Network Security
    • Describe the architectural characteristics, relevant technologies, protocols, and security considerations of each of the layers in the OSI model.
    • Explain the application of secure design practices in developing network infrastructure.
    • Describe the evolution of methods to secure IP communications protocols.
    • Explain the security implications of bound (cable and fiber) and unbound (wireless) network environments.
    • Describe the evolution of, and security implications for, key network devices.
    • Evaluate and contrast the security issues with voice communications in traditional and VoIP infrastructures.
    • Describe and contrast the security considerations for key remote access technologies.
    • Explain the security implications of software-defined networking (SDN) and network virtualization technologies.
  • Software Development Security
    • Recognize the many software elements that can put information systems security at risk.
    • Identify and illustrate major causes of security weaknesses in source code.
    • Illustrate major causes of security weaknesses in database and data warehouse systems.
    • Explain the applicability of the OWASP framework to various web architectures.
    • Select malware mitigation strategies appropriate to organizational information security needs.
    • Contrast the ways that different software development methodologies, frameworks, and guidelines contribute to systems security.
    • Explain the implementation of security controls for software development ecosystems.
    • Choose an appropriate mix of security testing, assessment, controls, and management methods for different systems and applications environments.
  • Security Assessment and Testing
    • Describe the purpose, process, and objectives of formal and informal security assessment and testing.
    • Apply professional and organizational ethics to security assessment and testing.
    • Explain internal, external, and third-party assessment and testing.
    • Explain management and governance issues related to planning and conducting security assessments.
    • Explain the role of assessment in data-driven security decision-making.
  • Security Operations
    • Show how to gather and assess security data efficiently and effectively.
    • Explain the security benefits of effective change management and change control.
    • Develop incident response policies and plans.
    • Link incident response to needs for security controls and their operational use.
    • Relate security controls to improving and achieving required availability of information assets and systems.
    • Understand the security and safety ramifications of various facilities, systems, and infrastructure characteristics.
  • Putting It All Together
    • Explain how governance frameworks and processes relate to the operational use of information security controls.
    • Relate the process of conducting forensic investigations to information security operations.
    • Relate business continuity and disaster recovery preparedness to information security operations.
    • Explain how to use education, training, awareness, and enagagement with all members of the organization as a way to strengthen and enforce information security processes.
    • Show how to operationalize information systems and IT supply chain risk management.
Download conspect training as PDF

Additional information

Prerequisites

Candidates for CISSP must have a minimum of five years cumulative paid work experience in two or more of the eight domains of the CISSP CBK. Earning a four-year college degree or regional equivalent or an additional credential from the ISC2 approved list will satisfy one year of the required experience. Education credit will only satisfy one year of experience.

A candidate who doesn’t have the required experience to become a CISSP may become an Associate of ISC2 by successfully passing the CISSP examination. The Associate of ISC2 will then have six years to earn the five years required experience.

Your work experience must fall within two or more of the eight domains of the ISC2 CISSP CBK:

  • Domain 1. Security and Risk Management
  • Domain 2. Asset Security
  • Domain 3. Security Architecture and Engineering
  • Domain 4. Communication and Network Security
  • Domain 5. Identity and Access Management (IAM)
  • Domain 6. Security Assessment and Testing
  • Domain 7. Security Operations
  • Domain 8. Software Development Security

More information https://www.isc2.org/Certifications/CISSP/experience-requirements
Difficulty level
Duration 5 days
Certificate

The participants will obtain certificates signed by ISC2 (course completion).

In order to complete the course, receive a certificate of completion and earn ISC2 continuing professional education (CPE) credits learners must:

  • Complete all learning activities within the course.
  • Complete a course evaluation.
  • Score 70% or higher on the final assessment.

A Certificate of Completion will be provided in class by your instructor once you have completed a course by meeting all the requirements. Please retain the certificate of completion as proof of credits earned.

This course will help prepare you also for the CISSP certification exam available at Pearson VUE test centers.

Each participant in an authorized training CISSP Certification Prep Course held in Compendium CE will receive a free CISSP Certification Exam voucher.
Trainer

ISC2 Authorized Instructor
Additional informations

Participating in this training you get 40 CPE (Continuing Professional Education) credits.

CPE credits for ISC2 credentials must be self-reported by members and associates through the ISC2 CPE Portal accessible via www.isc2.org using your member login credentials.

CPE credits earned for this course may be eligible for continuing professional education credits for non-ISC2 certifications. Please visit the continuing education requirements established by the credentialing organization for eligibility.

For specific questions related to your CPE credits or the CPE portal please contact member support - membersupport@isc2.org.

The Official ISC2 CBK Training Seminar for the CISSP has earned ACE CREDIT. Students who complete the course can apply for two hours of lower division credit at participating universities and colleges. For more information https://www.acenet.edu/national-guide/Pages/default.aspx

Other training ISC2 | Cyber security

ISC2 show more courses
Training thematically related

Security

Security | Aruba

Network Security | Broadcom

Java Programming | Capstone Courseware

Java EE | Capstone Courseware

Open-Source Frameworks | Capstone Courseware

XML and Web Services | Capstone Courseware

Core Training | Check Point

Infinity Specializations | Check Point

ICS/OT security | Compendium CE

Security+ | CompTIA

CySA+ | CompTIA

PenTest+ | CompTIA

SecurityX (formerly CASP+) | CompTIA

Certified Ethical Hacker | EC-Council

Advanced WAF (AWAF) | F5

Access Policy Manager (APM) | F5

Advanced Firewall Manager (AFM) | F5

Fortinet Certified Professional (FCP) | Fortinet

Fortinet Certified Solution Specialist (FCSS) | Fortinet

Cyber security | ISC2

Microsoft 365 | Microsoft

Security | Microsoft

Pen Testing & Ethical Hacking | Mile2

Information Systems Management | Mile2

Incident Handling | Mile2

Web Application Security | Mile2

Cloud Security | Mile2

Forensics | Mile2

Disaster Recovery | Mile2

Healthcare | Mile2

Risk Management | Mile2

Auditing | Mile2

Cyber Range | Mile2

Security Awareness | Mile2

Cyber Threat Analyst | Mile2

Network Security | Palo Alto Networks

SASE | Palo Alto Networks

Security Operations | Palo Alto Networks

ISO/IEC 27001 Information Security Management Systems | PECB®

LinkProof | Radware

DefensePro | Radware

AppDirector | Radware

Alteon | Radware

Fundamentals | SCADEMY

C# | SCADEMY

C/C++ | SCADEMY

Java | SCADEMY

PHP | SCADEMY

Python | SCADEMY

WEB | SCADEMY

Cloud | SCADEMY

Cryptography | SCADEMY

Finance | SCADEMY

Healthcare | SCADEMY

Telecome | SCADEMY

Software design | SCADEMY

Software testing | SCADEMY

Dark Web | SECO-Institute

Cyber Defence | SECO-Institute

Crisis Management | SECO-Institute

Data Protection | SECO-Institute

Kubernetes | SUSE

Linux | The Linux Foundation

E-learning | The Linux Foundation

Exam | The Linux Foundation

Contact form

Please fill form below to obtain more info about this training.






* Fields marked with (*) are required !!!

Information on data processing by Compendium - Centrum Edukacyjne Spółka z o.o.

PRICE 2500 EUR

FORM OF TRAINING ?

 

TRAINING MATERIALS ?

 

EXAM ?

 

SELECT TRAINING DATE

  • hybrid training: HYBRID
    • General information
    • Guaranteed dates
    • Last minute (-10%)
    • Language of the training
    • English
    • General information
    • Guaranteed dates
    • Last minute (-10%)
    • Language of the training
    • General information
    • Guaranteed dates
    • Last minute (-10%)
    • Language of the training
    • General information
    • Guaranteed dates
    • Last minute (-10%)
    • Language of the training
    • German
  • hybrid training: HYBRID
    • General information
    • Guaranteed dates
    • Last minute (-10%)
    • Language of the training
    • English
    • General information
    • Guaranteed dates
    • Last minute (-10%)
    • Language of the training
    • General information
    • Guaranteed dates
    • Last minute (-10%)
    • Language of the training
    • German
  • hybrid training: HYBRID
    • General information
    • Guaranteed dates
    • Last minute (-10%)
    • Language of the training
    • English
    • General information
    • Guaranteed dates
    • Last minute (-10%)
    • Language of the training
  • hybrid training: HYBRID
    • General information
    • Guaranteed dates
    • Last minute (-10%)
    • Language of the training
    • English
  • hybrid training: HYBRID
    • General information
    • Guaranteed dates
    • Last minute (-10%)
    • Language of the training
    • English
Book a training appointment
close

Traditional training

Sessions organised at Compendium CE are usually held in our locations in Kraków and Warsaw, but also in venues designated by the client. The group participating in training meets at a specific place and specific time with a coach and actively participates in laboratory sessions.

Dlearning training

You may participate from at any place in the world. It is sufficient to have a computer (or, actually a tablet, or smartphone) connected to the Internet. Compendium CE provides each Distance Learning training participant with adequate software enabling connection to the Data Center. For more information, please visit dlearning.eu site

close

Paper materials

Traditional materials: The price includes standard materials issued in the form of paper books, printed or other, depending on the arrangements with the manufacturer.

Electronic materials

Electronic materials: These are electronic training materials that are available to you based on your specific application: Skillpipe, eVantage, etc., or as PDF documents.

Ctab materials

Ctab materials: the price includes ctab tablet and electronic training materials or traditional training materials and supplies provided electronically according to manufacturer's specifications (in PDF or EPUB form). The materials provided are adapted for display on ctab tablets. For more information, check out the ctab website.

Upcoming ISC2 training

Training schedule ISC2