CISSP®

(5 days / 10 evenings)

Certified Information Systems Security Professional® (CISSP®) is one of the most prestigious security certifications. DTC is proud to offer education for this certification. We are also delighted to have a Chief Operating Officer who is CISSP® certified and an (ISC)²
Certified Instructor.

The CISSP® certification is well suited to I.T. professionals who aim to be I.S. (Information Security) professionals, network security professionals or systems security professionals. The CISSP certification is achieved by passing 1 exam. The exam covers the 10 security test domains from the (ISC)² ® CBK ®. For each of the 10 domains, the following will be covered:

• Information Protection Requirements
• Information Protection Environment
• Security Technology and Tools
• Assurance, Trust, and Confidence Mechanisms
• Information Protection and Management Services
• CBK
  
  

COURSE OUTLINE:

Information Security and Risk Management:

• Introduction
• Purposes of Information Security Management
• Concepts: Availability, Integrity, Confidentiality
• Risk Analysis and Assessment
  • Information Protection Requirements
  • Information Protection Environment
  • Security Technology and Tools
  • Assurance, Trust, and Confidence Mechanisms
  • Information Protection Management Servic
• Information Classification
  • Information Protection Requirements
  • Information Protection Environment
  • Security Technology and Tools
  • Assurance, Trust, and Confidence Mechanisms
  • Information Protection and Management Services
• Policies, Procedures, Standards, Baselines, Guidelines
  • Information Protection Requirements
  • Information Protection Environment
  • Security Technology and Tools
  • Information Protection Requirements
• Setting the Goal
  • Information Protection Environment
• Social Engineering
• Implementation (Delivery) Options
  • Security Technology and Tools
  • Assurance, Trust, and Confidence Mechanisms
  • Information Protection Management Services
• CBK
  • Components
  • Examples

Security Architecture and Design

• Introduction
• Information Protection Requirements
• The A-I-C Triad
• Information Protection Environment
  • Platform Architecture
  • Network Environment
  • Enterprise Architecture
  • Security Models
• Security Technology and Tools
  • Network Protection
• Assurance, Trust, and Confidence Mechanisms
  • Trusted Computer Security Evaluation Criteria (TCSEC)
  • The Trusted Network Interpretation (TNI)
  • Information Technology Security Evaluation Criteria (ITSEC)
  • The Common Criteria (CC)
  • Certification and Accreditation
• Information Protection and Management Services
• CBK

Access Control

• Introduction
• Information Protection Requirements
• Information Protection Environment
• Security Technology and Tools
  • Centralized Access Control Methodologies
  • Decentralized/Distributed Access Control Methodologies
  • Access to Data
• Assurance, Trust, and Confidence Mechanisms
• Intrusion Detection
• Analysis Engine Methods
• Information Protection and Management Services
• CBK

Application Security

• Introduction
• Information Protection Requirements
  • The A-I-C Triad
• Information Protection Environment
  • Open Source Code and Closed Source Code
  • Software Environment
  • The Database and Data Warehousing Environment
  • DBMS Architecture
  • Database Interface Languages
  • Security Assertion Markup Language (SAML)
  • Data Warehousing
  • Database Vulnerabilities and Threats
• Security Technology and Tools
  • System Life Cycle and Systems Development
  • System (Software) Development Methods
  • Including Security in a Systems Development Method
  • Programming Language and Security
  • Software Protection Mechanisms
  • DBMS Controls
• Assurance, Trust, and Confidence Mechanisms
  • Information Integrity
  • Information Accuracy
  • Information Auditing
  • Evaluation/Certification and Accreditation
• Information Protection and Management Services
  • Configuration Management
  • Summary
• CBK

Operations Security

• Introduction
• Information Protection Requirements
• Information Protection Environment
• Security Technology and Tools
• Assurance, Trust, and Confidence Mechanisms
• Information Protection and Management Services
• CBK

Cryptography

• Introduction
• Information Protection Requirements
  • The A-I-C Triad
• Information Protection Environment
  • Introduction
  • Definitions
  • Cryptanalysis and Attacks
  • Import/Export Issues
• Security Technology and Tools
  • Basic Concepts of Cryptography
  • Encryption Systems
  • Symmetric Key Cryptography Algorithms
  • Asymmetric Key Cryptography Algorithms
  • Message Integrity Controls
• Assurance, Trust, and Confidence Mechanisms
  • Digital Signatures and Certificate Authorities
  • Public Key Infrastructure (PKI)
• Information Protection and Management Services
  • Key Management
  • Key Management Functions
  • Key Generation
  • Distribution
  • Installation
  • Storage
  • Change
  • Control
  • Disposal
  • Modern Key Management
  • Principles of Key Management
  • Summary
• CBK
  • Components
  • Examples

Physical (Environmental) Security

• Introduction
• Information Protection Requirements
  • The A-I-C Triad
• Information Protection Environment
  • Crime Prevention through Environmental Design (CPTED)
• Security Technology and Tools
  • Perimeter and Building Grounds Boundary Protection
  • Building Entry Points
  • Inside the Building: Building Floors, Office Suites, Offices
  • Penetration (Intrusion) Detection Systems
• Assurance, Trust, and Confidence Mechanisms
  • Drills/Exercises/Testing
  • Vulnerability/ Penetration Tests
  • Creating a Checklist
  • Maintenance and Service
• Information Protection and Management Services
  • Awareness and Training
  • Summary
• CBK Components
  • Components
  • Examples

Telecommunications and Network Security

• Information Protection Requirements
• Information Protection Environment
  • Data Networks
  • Remote Access Services
  • Network Protocols
  • Network Threats and Attacks
• Security Technology and Tools
  • Content Filtering and Inspection
  • Intrusion Detection
• Assurance, Trust, and Confidence Mechanisms
• Information Protection and Management Services
  • CBK

Business Continuity and Disaster Recovery Planning

• Introduction
• Defining a Disaster
• Information Protection Requirements
• Information Protection Environment
• Security Technology and Tools
  • Phase I: Project Management and Initiation
  • Phase II: Business Impact Analysis (BIA)
  • Phase III: Recovery Strategies
  • Phase IV: Plan Development and Implementation
  • Phase V: Testing, Maintenance, Awareness, and Training
• Assurance, Trust, and Confidence Mechanisms
• Information Protection and Management Services
  • Summary
• CBK

Legal, Regulations, Compliance and Investigations

• Law
  • Information Protection Requirements
  • Information Protection Environment
  • Privacy
  • Recommended Course of Action
  • Security Technology and Tools
  • Assurance, Trust, and Confidence Mechanisms
  • Information Protection and Management Services
• Investigation
  • Information Protection Requirements
  • Information Protection Environment
  • Security Technology and Tools
  • Assurance, Trust, and Confidence Mechanisms
  • Information Protection and Management Services
• Ethics
  • Information Protection Requirements
  • Computer Ethics
  • Information Protection Environment
  • Security Technology and Tools
  • Assurance, Trust and Confidence Mechanisms
  • Information Protection and Management Services
  • Summary
• CBK
  

Back to Top