CISSP (Information Systems Security Architecture Professional) Event, 10.Feb.2025

Introduction

In today, fast-evolving times technological solutions by themselves cannot protect organisations' important information assets. Therefore, Employers demanding qualified information security staff give their organizations a leading edge by providing the highest standard of security for their customers, stakeholders, and organizational information assets. The CISSP Certification Training at Blackbird is the most effective and practical cybersecurity course you will find across the Middle East. This (ISC)² Certified Intermediate Cybersecurity Training is extremely beneficial for those who seek to make a successful career in IT Safety and Security domain.

This course covers all vital elements of security engineering. It makes you adept in every single aspect of IT security right from risk management to security operations. This training is wonderful to give your career a better direction and reach a level of credibility.

Course Outline of CISSP (Information Systems Security Architecture Professional)

Day 1

Security and Risk Management

• Information Security Program
• Roles and Responsibilities
• Risk Definitions
• Risk Identification
• Risk Assessment and Analysis
• Risk Mitigation and Response
• Risk Monitoring and Reporting
• Legal Considerations

Day 2

Introduction to Business Continuity and Disaster Recovery Planning

• Business Continuity Planning.
• Project Scope and Planning.
• Community Planning, Approval, and Implementation.
• Creation Business Continuity and Disaster Recovery Planning.
• Developing the Teams.

Day 3

Asset Security

• Introduction to Asset Security
• Data Classification
• Data Protection.
• System Hardening and Baselining.
• Threats to Data Storage.
• Data Redundancy.
• Secure Data Disposal

Day 4

Security Engineering

• Security Services Provided by Cryptography
• Algorithm.
• Elements of Cryptography.
• Principles of Secure Design.
• Security Models.
• System Architecture.
• Evaluation Criteria.

Day 5

Communications and Network Security

• Introduction to Communications and Network Security
• The OSI Model
• The OSI Model Network Devices
• The OSI Model Collision Domains
• The OSI Model Layers.
• The OSI Model Firewalls.
• Password Security
• Area Networks: LAN, WAN, and MAN.
• Remote Access

Day 6

Identity and Access Management

• Introduction to Identity and Access Management
• Authentication Types
• Strong Authentication
• Social Media and the Introduction to Kerberos.

Day 7

Security Architecture and Engineering

• Introduction to Security Engineering.
• Privacy by Design.
• Understand the Fundamental Concepts of Security Models.
• Types of Security Models.
• Security Capabilities of Information Systems.
• Assess and Mitigate the Vulnerabilities of Security Architectures.

Day 8

Security Assessment and Testing

• The 6 Security Assessments and Testing Objectives
• Vulnerability Assessments and Penetration Testing
• Vulnerability Scanning
• Testing Guidelines
• Rules of Engagement
• Protocol Analyzers (Sniffers) and Privacy

Day 9

Security Operations

• Security Incident Response
• The Forensic Investigation Process.
• Evidence Types
• Fault Management
• Backups

Day 10

Software Development Security (Application Security)

• Introduction to Software Development Security
• Secure Design.
• Requirements to Writing Secure Code
• Software Development Methodologies
• Cloud Application Security
• OWASP (Open Web Application Security Project)