Certified Information Systems Security Professional (CISSP)

Name: Certified Information Systems Security Professional (CISSP)
Rating: 3.8 (45 reviews)

Certified Information Systems Security Professional (CISSP) learn from scratch and get ready for the exam

Created byInfoSec Academy

Last updated 12/2019

English

English [Auto],

What you'll learn

The CISSP exam is rigorous, covering eight security domains essential for the protection of information systems, corporations and national infrastructures. Understanding that security is an enterprise wide problem, these domains provide the candidate with a broad understanding of the technical, managerial and human factors that must coordinate effectively to keep information and systems secure.
The Eight Domains of the CISSP CBK (Common Body of Knowledge)
Security and Risk Management
Asset Security
Security Engineering
Communication and Network Security
Identity and Access Management
Security Assessment and Testing
Security Operations
Software Development Security

Course content

9 sections • 15 lectures • 20h 23m total length

Course Introduction0:17
Course Outline0:10
Course Objectives0:21

Security and Risk Management Part 12:47:30
Leverage the CIA triad, security governance, and risk management—risk assessment and response—within ISO 27000, ITIL, and COBIT frameworks to support policy, continuity, disaster recovery, and compliance.
Security and Risk Management Part 223:38
develop and implement a business continuity plan with disaster recovery as a subplan, identify risks, define recovery timelines, and establish crisis communication and incident response.
Security and Risk Management Part 2 (Cont)26:06
Explore the components of business continuity and disaster recovery planning, including maximum tolerable downtime, RPO and RTO, backup strategies, facility options, and testing to ensure resilience.

Security Engineering Part 12:58:50
Provide an overview of security engineering focusing on secure design, security policies, and security models like Bell-LaPadula and Biba, along with cryptography and PKI.
Security Engineering Part 21:03:02
Explore security engineering concepts in CISSP, including PKI, digital certificates, certificate authorities, registration authorities, CRLs, and data protection through SSL/TLS, IPsec, VPNs, SSH, and cryptographic attacks.

Security Assessment and Testing1:18:35
Present security assessment and testing through ethical penetration testing, covering black box, white box, and gray box approaches to identify weaknesses for management action.
Security Assessment and Testing (Cont)45:34
Analyze protocol analyzers such as Wireshark and traffic capture in promiscuous mode; evaluate hardware and software intrusion detection systems, signature databases, pattern versus profile learning, and safe honeypot labs.

Requirements

Candidates must have a minimum of 5 years cumulative paid full-time work experience in 2 or more of the 8 domains of the CISSP CBK. Earning a 4-year college degree or regional equivalent or an additional credential from the (ISC)² approved list will satisfy 1 year of the required experience. Education credit will only satisfy 1 year of experience.
A candidate that doesn’t have the required experience to become a CISSP may become an Associate of (ISC)² by successfully passing the CISSP examination. The Associate of (ISC)² will then have 6 years to earn the 5 years required experience

Description

About this course:

In the information security industry, the Certified Information Systems Security Professional (CISSP) is the most widely recognized qualification. CISSP validates the in-depth technological and management knowledge and experience of an information security professional to effectively plan, develop and maintain an organization's overall security.

Covers eight security areas that are essential to the protection of information systems, corporations and national infrastructure. Knowing that security is an enterprise-wide problem, these areas provide the applicant with a broad understanding of the technological, administrative and human factors that need to effectively collaborate to keep information and systems secure.

Who this course is for:

Security Consultant
Security Analyst
Security Manager
Security Auditor
Security Architect
IT Director/Manager
Director of Security
Network Architect
Security Systems Engineer
Chief Information Security Officer

Certified Information Systems Security Professional (CISSP)

What you'll learn

Explore related topics

Course content

Course Introduction3 lectures • 1min

Module 1: Security and Risk Management3 lectures • 3hr 37min

Module 2: Asset Security1 lecture • 1hr 38min

Module 3: Security Engineering2 lectures • 4hr 2min

Module 4: Communications and Network Security1 lecture • 4hr 48min

Module 5: Identity and Access Management1 lecture • 1hr 38min

Module 6: Security Assessment and Testing2 lectures • 2hr 4min

Module 7: Security Operations1 lecture • 1hr 34min

Module 8: Software Development Security1 lecture • 1hr 1min

Requirements

Description

Who this course is for: