CISSP: Certified Information System Security Professional

Esquema del curso

Modulo 1: SECURITY AND RISK MANAGEMENT   
   

• Security Concepts 
• Security Governance Princip 
• Compliance 

• Professional Ethics 
• Security Documentation 
• Risk Management 
• Threat Modeling 
• Risk Response 
• Business Continuity Plan Fundamentals 
• Acquisition Strategy and Practice 
• Personnel Security Policies 
• Security Awareness and Training 

 

Modulo 2: ASSET SECURITY        

• Asset Classification 
• Secure Data Handling 
• Resource Provisioning and Protection 
• Manage Data Lifecycle 
• Asset Retention 
• Data Security Control 

 

Modulo 3: SECURITY ARCHITECTURE AND ENGINEERING 

• Security in the Engineering Lifecycle 
• System Component Security 
• Security Models 
• Controls and Countermeasures in Enterprise Security 
• Information System Security Capabilities 
• Design and Architecture Vulnerability Mitigation 
• Vulnerability Mitigation in Emerging Technologies 
• Cryptography Concepts 
• Cryptography Techniques 
• Cryptanalytic Attacks 
• Site and Facility Design for Physical Security 
• Physical Security Implementation in Sites and Facilities 

 

Modulo 4: COMMUNICATION AND NETWORK SECURITY  
     

• Network Protocol Security 
• Network Components Security 
• Communication Channel Security 
• Network Attack Mitigation 

 

Modulo 5: IDENTITY AND ACCESS MANAGEMENT    
     

• Physical and Logical Access Control 
• Identification and Authentication 
• Identity as a Service 
• Authorization Mechanisms 
• Access Control Attack Mitigation 

 

Modulo 6: SECURITY ASSESSMENT AND TESTING 

• System Security Control Testing 
• Software Security Control Testing 
• Security Process Data Collection 
• Audits 

 

Modulo 7: SECURITY OPERATIONS 

• Security Operations Concepts 
• Change Management 
• Physical Security 
• Personnel Security 
• Detective and Preventive Measures 
• Patch and Vulnerability Management 
• Logging and Monitoring 
• Incident Response 
• Investigations 
• Disaster Recovery Planning 
•  Disaster Recovery Strategies 
• Disaster Recovery Implementation 

 

Modulo 8: SOFTWARE DEVELOPMENT SECURITY 

• Security Principles in the System Lifecycle 
• Security Principles in the Software Development Lifecycle 
• Security Controls in the Development Environment 
• Database Security in Software Development 
• Software Security Effectiveness Assessment