CISSP: Mastering Information Systems Security Architecture Event, 12.May.2025

Course Description

This comprehensive 10-day CISSP training course covers all eight domains of the CISSP Common Body of Knowledge (CBK). Participants will gain in-depth knowledge of information systems security principles, practices, and architectures. The course prepares security professionals for the CISSP certification exam through lectures, discussions, and hands-on exercises.

Learning Objectives

• Understand and apply core concepts across all eight CISSP domains
• Develop skills to design, implement, and manage robust information security programs
• Learn to identify, assess, and mitigate information security risks
• Prepare thoroughly for the CISSP certification exam
• Gain practical experience through real-world case studies and exercises

Course Modules

Day 1: Security and Risk Management

• Information security concepts and principles
• Security governance and compliance
• Legal and regulatory issues
• Professional ethics

Day 2: Asset Security

• Information and asset classification
• Ownership and protection of assets
• Privacy protection
• Data security controls

Day 3: Security Architecture and Engineering I

• Security models and architectures
• Security evaluation models
• Security capabilities of information systems
• Vulnerabilities of security architectures

Day 4: Security Architecture and Engineering II

• Cryptography fundamentals
• Site and facility security design
• Physical security
• Cloud and virtualization security

Day 5: Communication and Network Security

• Secure network architecture design
• Secure network components
• Secure communication channels
• Network attacks and countermeasures

Day 6: Identity and Access Management

• Physical and logical access control
• Identification and authentication technologies
• Identity as a Service (IDaaS)
• Access control attacks and countermeasures

Day 7: Security Assessment and Testing

• Assessment and test strategies
• Security control testing
• Security process data collection
• Security audits

Day 8: Security Operations I

• Investigations and incident management
• Disaster recovery
• Business continuity
• Logging and monitoring

Day 9: Security Operations II

• Resource protection techniques
• Incident response procedures
• Preventative measures
• Patch and vulnerability management

Day 10: Software Development Security

• Security in the Software Development Lifecycle
• Development environment security controls
• Software security effectiveness
• Acquired software security impact

Practical Wins for Participants

• Ability to design and implement comprehensive information security programs
• Enhanced skills in risk assessment and mitigation strategies
• Improved capacity to align security practices with business objectives
• Readiness to pass the CISSP certification exam