Official (ISC)² CBK Training Seminar for CISSP Course Summary

Leadership and operations

This course is designed for information security professionals with deep technical and managerial knowledge and experience to effectively design, design and manage an organization's overall security system. This training course provides a comprehensive overview of information system security concepts and industry best practices covering the following eight CISSP Common Body of Knowledge (CBK) areas.®

Course features vary by delivery method and include:

• Official (ISC)² learning materials delivered via classroom book and instructor-led online instructor, and LMS for self-study.
• Authorized Instructor (ISC) Instruction² (In-class and Instructor-Led Online Class only)
• Authorized Teacher Support (ISC)² (for self-study only))
• Peer-to-peer discussions (in-class and online instructor-led only)
• Learning activities including case studies and applied scenario throughout the course
• Interactive flash cards
• Post-course assessment
• Glossary
• Who must attend

The course is ideal for those working in positions such as but not limited to:

• Information Technology Director
• Information Security Director
• Technical Director
• Compliance manager/specialist
• Security Director
• Information Architect
• IT Specialist/Director/Manager
• Information Manager/Information Risk Manager or Consultant
• Security Administrator
• Architect/Security Analyst
• Security Consultant
• security manager
• Security engineer / Security engineer

Course program:

Chapter 1: Information Security Environment
Chapter 2: Security of Information Assets
Chapter 3: Identity and Access Management
Chapter 4: Architecture and Design of Security Systems
Chapter 5: Communication and Network Security
Chapter 6: Software Development Security
Chapter 7: Security Assessment and Testing
Chapter 8: Security Operations
Chapter 9: Putting it all together
Chapter 10: CISSP Certification Information

Note: Throughout this course, exam areas may be covered in several chapters. The course includes a table indicating where the objectives of the exam plan are covered within the course. Unique icons are also used in course materials to identify exam plan goals.

Course Objectives:

At the end of this course students will be able to:

• Apply fundamental concepts and methods related to the fields of information technology and security
• Aligning the organization's overall operational goals with security functions and implementations
• Determine how to protect your organization's assets as they go through their lifecycle
• Using the concepts, principles, frameworks, and standards used to design, implement, monitor, and secure operating systems, hardware, networks, applications, and controls used to provide varying levels of confidentiality, integrity, and availability
• Application of security design principles to select appropriate measures to address vulnerabilities present in common types and architectures of information systems
• Explain the importance of cryptography and the security services it can provide in today's digital and information age
• Assessment of physical security elements depending on the needs of the information system
• Evaluation of the elements that make up communication and network security, in accordance with the needs for information security
• Using the concepts and architecture that define related technologies and systems and implementation protocols at the levels of the Open Systems Interconnection (OSI) model 1-7 to meet information security needs
• Determine appropriate access control models to meet business security requirements
• Applying physical and logical access control models to meet information security needs
• Delineation of the main methods for developing and validating test and audit strategies that support information security requirements
• Apply appropriate security controls and countermeasures to optimize the organization's operational function and capability
• Risk assessment of information systems for the operational activities of the organization
• Identify appropriate controls to address specific threats and vulnerabilities
• Application of information systems security concepts to reduce the risk of software and system vulnerabilities throughout the life cycle of systems

The course covers core knowledge and skills in all areas of security in cyberspace - information security, network security, mobile security, physical security, ethics and laws, related technologies, use of protection technologies and mitigation in business protection.

The course covers core knowledge and skills in all areas of cyber security and is also focused on preparing IT professionals to gain skills in performing cybersecurity analyst assignments.

PCI DSS is a security standard that aims to protect sensitive information about cardholders. As a result of an increase in the number of cases of unauthorized access to information systems and databases, passing for compliance with the PCI DSS standard has become a mandatory requirement for the payment card industry.

PCI DSS Training is specifically designed for payment card professionals and those working in the information security sector. The training program aims to provide participants with an enhanced knowledge of the nuances associated with the implementation of the standard.

Duration:

1.5 Days, 12 Ak. Hours

PCI DSS is a security standard that aims to protect sensitive information about cardholders. As a result of an increase in the number of cases of unauthorized access to information systems and databases, passing for compliance with the PCI DSS standard has become a mandatory requirement for the payment card industry.

Duration:

2 Days, 16 Ak. Hours

This course contains the best practices for building an ATM (ATM) security system, preventing and countering various types of fraud on the part of payment card holders and third parties in retail chains, protecting important information about bank card holders, and building a system for subsequent monitoring of fraudulent transactions.

As a result of an increase in the number of cases of unauthorized access to information systems and databases, passing for compliance with the PCI DSS standard has become a mandatory requirement for the payment card industry.

Duration:

3 Days, 24 Ak. Hours

Fundamentals of secure programming using code analysis tools

Course Description:

A quality, customized, and security-focused Software Development Life Cycle (SDLC) is the key to application success. Our security experts will help your development team build secure applications by building security requirements into the development process from the very first phase.

What is a secure CRPO?

Security problems in applications are often the result of design flaws, insufficient programming standards, and programmer errors. Unfortunately, the outdated view that security reviews should only be done as a final step, and only important before an application is released, is still very common. Application security depends on the successful integration and incorporation of security controls and requirements throughout the software development cycle (SDF).

Why is a safe CRPO so important?

Secure CRPO involves the use of secure programming standards and practices, allowing developers to better understand the impact of their decisions and be aware of which parts of the application can be attacked.
The best armor is to be further than the range of the shot

Business security of bank payment cards

Course Description:

This course contains the best practices for building an ATM (ATM) security system, preventing and countering various types of fraud on the part of payment card holders and third parties in retail chains, protecting important information about bank card holders, and building a system for subsequent monitoring of fraudulent transactions.

As a result of an increase in the number of cases of unauthorized access to information systems and databases, passing for compliance with the PCI DSS standard has become a mandatory requirement for the payment card industry.

Data protection of payment card holders in accordance with international standards PCI DSS

Course Description:

PCI DSS is a security standard that aims to protect sensitive information about cardholders. As a result of an increase in the number of cases of unauthorized access to information systems and databases, passing for compliance with the PCI DSS standard has become a mandatory requirement for the payment card industry.

PCI DSS Training is specifically designed for payment card professionals and those working in the information security sector. The training program aims to provide participants with an enhanced knowledge of the nuances associated with the implementation of the standard.

Fundamentals and Introduction to PCI DSS

Course Description:

PCI DSS is a security standard that aims to protect sensitive information about cardholders. As a result of an increase in the number of cases of unauthorized access to information systems and databases, passing for compliance with the PCI DSS standard has become a mandatory requirement for the motherboard industry.

This intensive course is aimed at information systems auditors preparing to take the CISA certification exam.

This five-day course is aimed at information security managers/experts preparing for the internationally recognized certifications (ISC)2 Certified Information Systems Security Professional and ISACA Certified Information Security Manager.