(CISSP) is an independent information security certification governed by the not-for-profit International Information Systems Security Certification. [+]
Certified Information Systems Security Professional (CISSP) is an independent information security certification governed by the not-for-profit International Information Systems Security Certification The certification itself is seen as the world’s premier certification for information security professionals. The CISSP Bootcamp includes in-depth & intense coverage of all ten domains plus tips and advice to prepare yourself for the exam. CISSP certification is not only an objective measure of excellence, but a globally recognized standard of achievement.
Andy Malone is a world class technology instructor and consultant. He is Microsoft MVP (Microsoft Most Valuable Professional) in Enterprise Security for 8 years, and instructor on a broad range of Security areas (CISSP, Comptia Security +, Cyber-Security & Awareness Training, Computer Forensics Training). Andy is a veteran conference speaker at prestigious events as Microsoft TechEd North America, Europe, Middle East & Africa, NIC, Windows Connections and Cybercrime. Andy`s passionate style of delivery, combined with a sense of fun has become his trademark and has won him great acclaim. Attending Andy`s classes you will learn about Microsoft’s Technologies and get hands on experience, but you will also get a wealth of knowledge, skills and additional “extras” which include whitepapers, tips, tricks, tools and a whole lot more! Follow Andy on Twitter @AndyMalone
The CISSP draws from a comprehensive, up-to-date, global common body of knowledge that ensures security leaders have a deep knowledge and understanding of new threats, technologies, regulations, standards, and practices. The CISSP exam tests ones competence in the 8 domains of the CISSP CBK, which cover:
Domain 1: Security and Risk Management (Security, Risk, Compliance, Law, Regulations, Business Continuity)
Domain 2: Asset Security (Protecting Security of Assets)
Domain 3: Security Engineering (Engineering and Management of Security)
Domain 4: Communications and Network Security (Designing and Protecting Network Security)
Domain 5: Identity and Access Management (Controlling Access and Managing Identity)
Domain 6: Security Assessment and Testing (Designing, Performing, and Analyzing Security Testing)
Domain 7: Security Operations (Foundational Concepts, Investigations, Incident Management, DisasterRecovery)
Domain 8: Software Development Security (Understanding, Applying, and Enforcing Software Security)
Module 9: CISSP Test Review
Module 10: CISSP Exam Preparation & Review Questions
Understand and apply the concepts of risk assessment, risk analysis, data classification, and security awareness and Implement risk management and the principles used to support it(Risk avoidance, Risk acceptance, Risk mitigation, Risk transference)
Apply a comprehensive and rigorous method for describing a current and/or future structure and behavior for an organizations security processes, information security systems, personnel, and organizational sub-units so that these practices and processes align with the organizations core goals and strategic direction and address the frameworks and policies, concepts, principles, structures, and standards used to establish criteria for the protection of information assets, as well as to assess the effectiveness of that protection and establish the foundation of a comprehensive and proactive security program to ensure the protection of an organizations information assets
Apply a comprehensive and rigorous method for describing a current and/or future structure and behavior for an organizations security processes, information security systems, personne, and organizational sub-units so that these practices and processes align with the organizations core goals and strategic direction and examine the principles, means, and methods of applying mathematical algorithms and data transformations to information to ensure its integrity, confidentiality, and authenticity
Understand the structures, transmission methods, transport formats, and security measures used to provide confidentiality, integrity, and availability for transmissions over private and
Public communications networks and media and identify risks that can be quantitatively and qualitatively measured to support the building of business cases to drive proactive security in the enterprise.
Offer greater visibility into determining who or what may have altered data or system information, potentially affecting the integrity of those asset and match an entity, such as a person or a computer system, with the actions that entity takes against valuable assets, allowing organizations to have a better understanding of the state of their security posture.
Plan for technology development, including risk, and evaluate the system design against mission requirements, and identify where competitive prototyping and other evaluation techniques fit in the process
Protect and control information processing assets in centralized and distributed environments and execute the daily tasks required to keep security services operating reliably and efficiently. Understand the Software Development Life Cycle (SDLC) and how to apply security to it, and identify which security control(s) are appropriate for the development environment, and assess the effectiveness of software security.