Course Outline
Security and Risk Management
- Core principles of confidentiality, integrity, and availability (CIA)
- Security governance, policy development, and frameworks (e.g., ISO 27001, NIST CSF)
- Conducting risk analysis, assessment, and mitigation strategies
- Business impact analysis, security awareness programs, and training
- Navigating legal, regulatory, compliance, and privacy requirements (GDPR, HIPAA, local laws)
Asset Security
- Information classification, ownership models, and protection mechanisms
- Data management practices: retention, deletion, backup, and transfer
- Privacy safeguards and end-to-end data lifecycle management
- Secure asset utilization and media control protocols
Security Engineering
- Principles of secure system and architecture design
- Cryptographic techniques: symmetric, asymmetric, hashing, PKI, and key management
- Physical security measures and the role of hardware security modules (HSMs)
- Secure virtualization, cloud-native security patterns, and secure API integration
Communications and Network Security
- Network models, protocols, and secure communication standards (TLS, VPN, IPSec)
- Perimeter security, network segmentation, firewalls, and IDS/IPS implementations
- Wireless security, remote access solutions, and zero-trust network architectures
- Designing secure network architectures for cloud and hybrid environments
Identity and Access Management (IAM)
- Access control fundamentals: identification, authentication, authorization, and accountability
- Identity providers, federation services, SSO, and cloud access federation
- Privileged access management (PAM) and role-based access control (RBAC)
- Identity lifecycle management: provisioning, deprovisioning, and entitlement reviews
Security Assessment and Testing
- Control testing methods: SAST, DAST, penetration testing, and vulnerability scanning
- Audit methodologies and review frameworks
- Log management, continuous monitoring, and assessment practices
- Red team, blue team, and adversary simulation strategies
Security Operations
- Incident response planning, execution, and digital forensics
- Designing Security Operations Centers (SOC), monitoring, and integrating threat intelligence
- Patching, vulnerability management, and configuration controls
- Business continuity, disaster recovery, and resilience planning
Software Development Security
- Secure Software Development Lifecycle (SDLC) and DevSecOps practices
- Identifying common vulnerabilities (beyond OWASP Top 10) and mitigation strategies
- Code review processes, static/dynamic analysis, and secure development frameworks
- Managing supply chain risks, dependencies, and runtime protections
Exam Strategy, Practice, and Conclusion
- Understanding the CISSP exam format, question tactics, and time management
- Completing practice exams and domain-specific quizzes
- Performing gap analysis and creating personalized study plans
- Exploring recommended resources, professional communities, and continuous learning paths
Summary and Future Actions
Requirements
- A minimum of 5 years of cumulative, compensated professional experience in two or more (ISC)² CISSP domains, or equivalent qualifications
- Core understanding of information security principles, networking, and software systems
- Knowledge of risk management, cryptography, and IT operational practices
Target Audience
- Security professionals actively preparing for the CISSP examination
- Security architects, managers, and consultants
- IT executives, auditors, and governance specialists
Testimonials (7)
Being approachable and pushing us into interaction
Daniel - EY GLOBAL SERVICES (POLAND) SP Z O O
Course - CISSP - Certified Information Systems Security Professional
the topic was interesting itself and we had opportunity to discuss it with different perspectives.
Marcin - EY GLOBAL SERVICES (POLAND) SP Z O O
Course - CISSP - Certified Information Systems Security Professional
trainer competence
Evghenii - Arctic Stream
Course - CISSP - Certified Information Systems Security Professional
Good material organization and understandable instructor's English.
Ion Temciuc - Arctic Stream
Course - CISSP - Certified Information Systems Security Professional
Good material organization and understandable instructor's English.
Hanny - Arctic Stream
Course - CISSP - Certified Information Systems Security Professional
His knowledge, the way he explains and his kindness
Marcelo Martinez - EY GLOBAL SERVICES (POLAND) SP Z O O
Course - CISSP - Certified Information Systems Security Professional
I liked mix of theory and practical case example. Very good overview of each topic then going through slides.
