Course Outline
Security and Risk Management
- Core principles of confidentiality, integrity, and availability (CIA)
- Governance, policy development, and frameworks (including ISO 27001 and NIST CSF)
- Analyzing, assessing, and mitigating risk
- Business impact analysis, security awareness, and training programs
- Addressing legal, regulatory, compliance, and privacy matters (GDPR, HIPAA, local laws)
Asset Security
- Classifying, owning, and protecting information assets
- Data management practices (retention, deletion, backup, and transfer)
- Ensuring privacy protection and managing the data lifecycle
- Controlling the secure use of assets and media
Security Engineering
- Principles of secure system and architecture design
- Cryptographic techniques: symmetric, asymmetric, hashing, PKI, and key management
- Physical security considerations and hardware security modules (HSMs)
- Implementing secure virtualization, cloud-native patterns, and secure API integration
Communications and Network Security
- Network models, protocols, and secure communication methods (TLS, VPN, IPSec)
- Defending perimeters through segmentation, firewalls, and IDS/IPS
- Securing wireless networks, remote access, and zero-trust architectures
- Designing secure networks for cloud and hybrid environments
Identity and Access Management (IAM)
- Access control mechanisms: identification, authentication, authorization, and accountability
- Managing identity providers, federation, SSO, and cloud access
- Implementing privileged access management (PAM) and role-based access control (RBAC)
- Managing the identity lifecycle: provisioning, deprovisioning, and entitlement reviews
Security Assessment and Testing
- Testing security controls: SAST, DAST, penetration testing, and vulnerability scanning
- Defining audit strategies and review frameworks
- Managing logs, monitoring, and conducting continuous assessments
- Utilizing red teaming, blue teaming, and adversary simulation
Security Operations
- Planning, executing, and forensically analyzing incident response
- Designing SOC operations, monitoring, and integrating threat intelligence
- Managing patching, vulnerabilities, and system configurations
- Strategies for business continuity, disaster recovery, and resilience
Software Development Security
- Implementing secure software lifecycle (SDLC) and DevSecOps practices
- Mitigating common vulnerabilities (extending beyond the OWASP Top 10)
- Conducting code reviews, static/dynamic analysis, and using secure frameworks
- Addressing supply chain risks, dependency management, and runtime protection
Exam Strategy, Practice and Wrap-Up
- Understanding the CISSP exam format, question tactics, and time management
- Taking practice exams and domain-specific quizzes
- Performing gap analysis and creating personalized study plans
- Exploring recommended resources, communities, and continuous learning paths
Summary and Next Steps
Requirements
- A minimum of five years of paid, cumulative work experience in at least two (ISC)² CISSP domains, or equivalent professional experience
- A solid understanding of core information security concepts, networking, and software systems
- A working knowledge of risk management, cryptography, and IT operations
Target Audience
- Information security professionals aiming to pass the CISSP exam
- Security architects, managers, and consultants
- IT leaders, auditors, and governance specialists
Testimonials (7)
Being approachable and pushing us into interaction
Daniel - EY GLOBAL SERVICES (POLAND) SP Z O O
Course - CISSP - Certified Information Systems Security Professional
the topic was interesting itself and we had opportunity to discuss it with different perspectives.
Marcin - EY GLOBAL SERVICES (POLAND) SP Z O O
Course - CISSP - Certified Information Systems Security Professional
trainer competence
Evghenii - Arctic Stream
Course - CISSP - Certified Information Systems Security Professional
Good material organization and understandable instructor's English.
Ion Temciuc - Arctic Stream
Course - CISSP - Certified Information Systems Security Professional
Good material organization and understandable instructor's English.
Hanny - Arctic Stream
Course - CISSP - Certified Information Systems Security Professional
His knowledge, the way he explains and his kindness
Marcelo Martinez - EY GLOBAL SERVICES (POLAND) SP Z O O
Course - CISSP - Certified Information Systems Security Professional
I liked mix of theory and practical case example. Very good overview of each topic then going through slides.
