Course

Course Summary
Credit Type:
Course
ACE ID:
ISCT-0002
Organization:
International Information System Security Certification Consortium ISC2
Location:
Classroom-based
Length:
40 hours
Dates Offered:
Credit Recommendation & Competencies
Level Credits (SH) Subject
Lower-Division Baccalaureate 2 Information Security or Cyber Security
Description

Objective:

The course objective is to provide a comprehensive review of the knowledge required to effectively design, engineer and manage the overall security posture of an organization. This training course will help students review and refresh their knowledge and identify areas they need to study for the CISSP exam. Taught by an (ISC)² authorized instructor, the course covers eight domains, including: domain 1: security and risk management; domain 2: asset security; domain 3: security architecture and engineering; domain 4: communication and network security; domain 5: identity and access management (IAM); domain 6: security assessment and testing; domain 7: security operations; and domain 8: software development security.

Learning Outcomes:

  • Understand how to protect assets of the organization as they go through their lifecycle
  • Identify standard terms for applying physical and logical access controls to environments related to their security practice
  • Understand the System Lifecycle (SLC) and the Software Development Lifecycle (SDLC) and how to apply security to it
  • Identify which security control(s) are appropriate for the development environment
  • Assess the effectiveness of software security
  • Understand and apply fundamental concepts and methods related to the fields of information technology and security
  • Align overall organizational operational goals with security functions and implementations
  • Understand the concepts, principles, structures and standards used to design, implement, monitor and secure operating systems, equipment, networks, applications and those controls used to enforce various levels of confidentiality, integrity and availability
  • Implement system security through the application of security design principles and application of appropriate security control mitigations for vulnerabilities present in common information system types and architectures
  • Understand the importance of cryptography and the security services it can provide in today's digital and information age
  • Understand the impact of physical security elements on information system security and apply secure design principles to evaluate or recommend appropriate physical security protections
  • Understand the elements that comprise communication and network security coupled with a thorough description of how the communication and network systems function
  • List the concepts and architecture that define the associated technology and implementation systems and protocols at Open Systems Interconnection (OSI) model layers 1-7
  • Appraise various access control models to meet business security requirements
  • Name primary methods for designing and validating test and audit strategies that support business requirements
  • Enhance and optimize an organization's operational function and capacity by applying and utilizing appropriate security controls and countermeasures
  • Recognize risks to an organization's operational endeavors and assess specific threats, vulnerabilities and controls

General Topics:

  • Domain 1: security and risk management
  • Domain 2: asset security
  • Domain 3: security architecture and engineering
  • Domain 4: communication and network security
  • Domain 5: identity and access management (IAM)
  • Domain 6: security assessment and testing
  • Domain 7: security operations
  • Domain 8: software development security
Instruction & Assessment

Instructional Strategies:

  • Audio Visual Materials
  • Case Studies
  • Classroom Exercise
  • Discussion
  • Lectures
  • Practical Exercises

Methods of Assessment:

  • Examinations

Minimum Passing Score:

70%
Supplemental Materials