Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 35 hours
Course Outline
Security Governance and Risk Management
- Core principles of confidentiality, integrity, and availability (CIA) in protecting government information assets
- Establishing security governance structures, policies, and standards compliant with ISO 27001 and the NIST Cybersecurity Framework (CSF)
- Conducting comprehensive risk analysis, quantitative and qualitative assessments, and implementing effective mitigation strategies
- Performing business impact analyses, enhancing workforce security awareness, and implementing mandatory training programs
- Navigating legal obligations, regulatory compliance, and privacy statutes including GDPR, HIPAA, and applicable local laws for government operations
Asset Protection and Data Governance
- Defining information classification schemes, establishing ownership protocols, and implementing protective controls
- Managing data handling lifecycle processes, including retention schedules, secure deletion, backup integrity, and authorized transfers
- Safeguarding privacy rights and overseeing full data lifecycle management to ensure regulatory adherence
- Ensuring the secure use of information assets and enforcing strict media control and disposal procedures
Secure Architecture and Engineering
- Applying secure design principles to system architecture and infrastructure development
- Implementing cryptographic standards, including symmetric and asymmetric encryption, hashing algorithms, Public Key Infrastructure (PKI), and robust key management
- Integrating physical security measures and utilizing Hardware Security Modules (HSMs) for key protection
- Designing secure virtualization environments, adopting cloud-native security patterns, and ensuring secure API integration
Network and Communications Security
- Securing network models and protocols through the use of TLS, Virtual Private Networks (VPNs), and IPSec standards
- Deploying perimeter defenses, network segmentation, firewalls, and Intrusion Detection/Prevention Systems (IDS/IPS)
- Protecting wireless networks, securing remote access points, and implementing zero-trust network architectures
- Architecting secure network topologies within cloud and hybrid environments to support secure government communications
Identity and Access Management (IAM)
- Enforcing access control through rigorous identification, authentication, authorization, and accountability mechanisms
- Managing identity providers, federation protocols, Single Sign-On (SSO), and cloud-based access federation
- Implementing Privileged Access Management (PAM) and Role-Based Access Control (RBAC) to minimize exposure
- Overseeing the identity lifecycle, including secure provisioning, deprovisioning, and regular entitlement reviews
Security Assessment and Testing Protocols
- Testing security controls via Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), penetration testing, and vulnerability scanning
- Developing audit strategies and applying established review frameworks to verify control effectiveness
- Managing logs, executing continuous monitoring, and conducting ongoing security assessments
- Employing red team, blue team, and adversary simulation techniques to validate defensive capabilities
Security Operations and Resilience
- Planning and executing incident response, conducting digital forensics, and managing case handling
- Designing Security Operations Centers (SOCs), integrating threat intelligence, and establishing monitoring capabilities
- Managing patching cycles, vulnerability remediation, and system configuration management
- Formulating business continuity, disaster recovery, and resilience plans to sustain critical services
Secure Software Development Lifecycle
- Integrating security into the Software Development Lifecycle (SDLC) and adopting DevSecOps practices
- Identifying and mitigating common vulnerabilities, extending beyond the OWASP Top 10 to address broader security risks
- Conducting code reviews, utilizing static and dynamic analysis tools, and leveraging secure development frameworks
- Assessing supply chain risks, managing third-party dependencies, and implementing runtime protection mechanisms
Examination Preparation and Continuous Learning
- Understanding the CISSP exam structure, developing question analysis strategies, and optimizing time management
- Completing practice examinations and domain-specific assessments to gauge readiness
- Performing personal gap analyses and establishing structured study plans for exam preparation
- Utilizing recommended resources, professional communities, and continuous learning pathways for career development
Conclusion and Strategic Recommendations
Requirements
- Minimum of 5 years of cumulative, compensated professional experience in two or more (ISC)² CISSP domains, or equivalent qualifying experience
- Solid foundational understanding of information security principles, network infrastructure, and software systems
- Working proficiency in risk management, cryptographic standards, and IT operational processes
Intended Audience
- Information security professionals preparing for the CISSP certification examination
- Security architects, management personnel, and independent consultants
- Information technology leaders, auditors, and governance specialists responsible for oversight
Testimonials (7)
Being approachable and pushing us into interaction
Daniel - EY GLOBAL SERVICES (POLAND) SP Z O O
Course - CISSP - Certified Information Systems Security Professional
the topic was interesting itself and we had opportunity to discuss it with different perspectives.
Marcin - EY GLOBAL SERVICES (POLAND) SP Z O O
Course - CISSP - Certified Information Systems Security Professional
trainer competence
Evghenii - Arctic Stream
Course - CISSP - Certified Information Systems Security Professional
Good material organization and understandable instructor's English.
Ion Temciuc - Arctic Stream
Course - CISSP - Certified Information Systems Security Professional
Good material organization and understandable instructor's English.
Hanny - Arctic Stream
Course - CISSP - Certified Information Systems Security Professional
His knowledge, the way he explains and his kindness
Marcelo Martinez - EY GLOBAL SERVICES (POLAND) SP Z O O
Course - CISSP - Certified Information Systems Security Professional
I liked mix of theory and practical case example. Very good overview of each topic then going through slides.
