CISSP: Certified Information System Security Professional

Esquema del curso

Modulo 1: SECURITY AND RISK MANAGEMENT   
   

• Security Concepts 

• Security Governance Princip 

• Compliance 

• Professional Ethics 

• Security Documentation 

• Risk Management 

• Threat Modeling 

• Risk Response 

• Business Continuity Plan Fundamentals 

• Acquisition Strategy and Practice 

• Personnel Security Policies 

• Security Awareness and Training 

 

Modulo 2: ASSET SECURITY        

• Asset Classification 

• Secure Data Handling 

• Resource Provisioning and Protection 

• Manage Data Lifecycle 

• Asset Retention 

• Data Security Control 

 

Modulo 3: SECURITY ARCHITECTURE AND ENGINEERING 

• Security in the Engineering Lifecycle 

• System Component Security 

• Security Models 

• Controls and Countermeasures in Enterprise Security 

• Information System Security Capabilities 

• Design and Architecture Vulnerability Mitigation 

• Vulnerability Mitigation in Emerging Technologies 

• Cryptography Concepts 

• Cryptography Techniques 

• Cryptanalytic Attacks 

• Site and Facility Design for Physical Security 

• Physical Security Implementation in Sites and Facilities 

 

Modulo 4: COMMUNICATION AND NETWORK SECURITY  
     

• Network Protocol Security 

• Network Components Security 

• Communication Channel Security 

• Network Attack Mitigation 

 

Modulo 5: IDENTITY AND ACCESS MANAGEMENT    
     

• Physical and Logical Access Control 

• Identification and Authentication 

• Identity as a Service 

• Authorization Mechanisms 

• Access Control Attack Mitigation 

 

Modulo 6: SECURITY ASSESSMENT AND TESTING 

• System Security Control Testing 

• Software Security Control Testing 

• Security Process Data Collection 

• Audits 

 

Modulo 7: SECURITY OPERATIONS 

• Security Operations Concepts 

• Change Management 

• Physical Security 

• Personnel Security 

• Detective and Preventive Measures 

• Patch and Vulnerability Management 

• Logging and Monitoring 

• Incident Response 

• Investigations 

• Disaster Recovery Planning 

•  Disaster Recovery Strategies 

• Disaster Recovery Implementation 

 

Modulo 8: SOFTWARE DEVELOPMENT SECURITY 

• Security Principles in the System Lifecycle 

• Security Principles in the Software Development Lifecycle 

• Security Controls in the Development Environment 

• Database Security in Software Development 

• Software Security Effectiveness Assessment