What You'll Learn

In-depth coverage of the ten domains required to pass the CISSP exam:

• Operations Security
• Access Control
• Cryptography
• Security Architecture and Design
• Telecommunications and Network Security
• Disaster Recovery and Business Continuity Planning
• Legal, Regulations, Compliance, and Investigations
• Application Security
• Information Security and Risk Management
• Physical (Environmental) Security

Who Needs to Attend

IT consultants, managers, security policy writers, privacy officers, information security officers, network administrators, security device administrators, security engineers, and other security professionals whose positions require CISSP certification.

Prerequisites

Systems administration experience, familiarization with TCP/IP, and an understanding of UNIX, Linux, and Windows. This advanced course also requires intermediate-level knowledge of the security concepts covered in our Security+ Prep Course.

• Security+ Prep Course (SYO-301)

Course Outlines

1. Introduction

• Course Overview
• CISSP Candidate Requirements
• CISSP Exam Review

2. Operations Security

• Operation Security Principles, Techniques, and Mechanisms
• Principles and Practices of Good Security
• Resource Protection Mechanisms and Techniques
• Attacks and Prevention Methods

3. Access Control

• Authentication
• Authorization
• Accountability
• Threats to Access Control

4. Cryptography

• History of Cryptography
• Symmetric Encryption
• Asymmetric Encryption
• Hashing and Digital Signatures
• Public Key Infrastructure
• Cryptographic Attacks

5. Security Architecture and Design

• Computer Architecture
• Rings of Protection
• Security Models
• System Evaluation

6. Telecommunications and Network Security

• The OSI Model
• The TCP/IP Model
• WAN Protocols
• Routing
• Wireless Systems
• Fault Tolerance

7. Disaster Recovery and Business Continuity Planning

• Disaster Recovery Planning
• Business Impact Analysis
• Business Continuity Planning
• Backup and Off-Site Facilities
• Testing Contingency Plans

8. Legal, Regulations, Compliance, and Investigations

• Laws and Ethics
• Computer Crime
• Incident Response and Forensics

9. Application Security

• Database Security
• System Development
• Software Development Methods
• Threats and Vulnerabilities

10. Information Security and Risk Management

• Security Management
• Risk Analysis
• Classification Controls

11. Physical (Environmental) Security

• Threats to Physical Security
• Administrative Controls
• Environmental and Safety Controls
• Physical and Technical Controls

12. Test Review and Preparation

• Test Review
• Test Registration
• Test Preparation
• Certification Maintenance