CISSP® Preparation Course

CISSP Preparation Course Modules

Module 1 – Security and Risk Management

In Module 1, you gain an in-depth understanding of policies, methods, concepts, structures and standards that enable effective and efficient security governance and risk management. This module also covers key security management soft skills including leadership, organisational structures, behaviour and security awareness.

Topics covered:

• C.I.A
• Security governance
• Compliance
• BCP & DRP
• Risk management
• Education, training and awareness

Module 2 – Asset Security

Module 2 introduces you to securing and monitoring company assets and data to ensure an appropriate level of confidentiality, integrity and availability.

Topics covered:

• Asset management
• Data management
• Information classification
• Data security controls

Module 3 – Security Architecture and Engineering

Module 3 equips you with the knowledge and skills you need to design and implement secure applications, operating systems, equipment and networks.

Topics covered:

• Engineering lifecycle
• Security architectures and models
• Vulnerabilities of architectures, in software and systems
• Vulnerabilities in embedded and mobile devices
• Application and use of cryptography
• Site and facility design, planning and operations

Module 4 – Communication and Network Security

Module 4 is a deep dive into network architectures, communication and transmission methods, protocols and measures to guarantee security (confidentiality, integrity and availability).

Topics covered:

• Network architecture and design
• Multi-layer and converged protocols
• Security network components
• Secure communication channels
• Network attacks

Module 5 – Identity and Access Management (IAM)

Module 5  immerses you in physical and logical access control methods and identity management.

Topics covered:

• Physical & logical access to assets
• Identification & authentication of people
• Identity management
• Authorization mechanisms
• Access control attacks
• Attribute-Based Access Control (ABAC)

Module 6 – Security Assessment and Testing

Module 6 equips you with the knowledge and skills you need to detect vulnerabilities in IT systems and determine the risks they may pose. In this module, we will review various security testing and evaluation methods and techniques.

Topics covered:

• Assessment & test strategies
• Code review and interface testing
• Collection of security process data
• Internal and external audits

Module 7 – Security Operations

Module 7 covers security operations and operations security. ‘Security operations’ refers to security measures enforced in the organisation’s day-to-day operations. ‘Operations security’, on the other hand, addresses the security and control of information assets in centralised and distributed environments.

Topics covered:

• Concepts an foundation of security operations
• Investigation and evidence collection
• Incident handling and response
• Reporting and documentation
• Patch and vulnerability management
• Change and configuration management
• Disaster recovery
• Asset management
• Security training and awareness
• Emergency management
• Digital forensics tools, tactics, and procedures

Module 8 – Software Development Security

Module 8 gives you a comprehensive introduction to application security. Vulnerable applications can lead to attacks with a profound impact on systems. In this part of the course, you will learn everything a security manager must know about software security.

Topics covered:

• Software development security
• Security in the software environment
• Software protection mechanisms
• Effectiveness of software security
• Assessment of software security
• Define and apply secure coding guidelines and standards

ISC2 CISSP® Certification Exam

The CISSP® exam is conducted by ISC2 and is not included in the course. The exam is in English, lasts 4 hours and consists of 125 to 175  open and multiple-choice questions. The CISSP exam is a CAT (Computerized Adaptive Testing) exam. This means the algorithm adapts the difficulty of questions presented depending on your responses to previous questions to measure your individual ability in the most efficient way.

The CISSP exam costs approximately € 665. Upon successful completion of the CISSP exam, you can start your CISSP certification process with ISC2, provided that you meet the CISSP experience requirements.

The CISSP exam requires in-depth theoretical knowledge. In addition to attending the training, you will need to invest a good portion of your time in self-study to excel at your exam. The recommended self-study time is a minimum. You may need significantly more self-study time depending on your personal situation.