Day 1
9am-10:30am
- 1. Security and Risk Management (e.g., Security, Risk, Compliance, Law, Regulations, Business Continuity)
Understand and Apply Concepts of Confidentiality, Integrity, and Availability
Apply Security Governance Principles
Compliance
10:30am-10:45am Morning break
10:45-12:30pm
Understand Legal and Regulatory Issues that Pertain to Information Security in a Global Context
Develop and Implement Documented Security Policy, Standards, Procedures, and Guidelines
Understand Business Continuity Requirements
Contribute to Personnel Security Policies
12:30pm-1:30pm Lunch
1:30-3:30pm
Understand and Apply Risk Management Concepts
Understand and Apply Threat Modeling
3:30pm-3:45pm Afternoon Break
3:45pm-5:00pm
Integrate Security Risk Considerations into Acquisitions Strategy and Practice
Establish and Manage Security Education, Training, and Awareness
Day 2
9am-10:30am
- 2. Asset Security (Protecting Security of Assets)
Classify Information and Supporting Assets
Determine and Maintain Ownership
Protect Privacy
10:30am-10:45am Morning break
10:45-12:30pm
Course Outline :: Information Systems Security Professional::
Ensure Appropriate Retention
Determine Data Security Controls
Establish Handling Requirements
12:30pm-1:30pm Lunch
1:30-3:30pm
- 3. Security Engineering (Engineering and Management of Security)
Implement and Manage an Engineering Life Cycle Using Security Design Principles
Understand Fundamental Concepts of Security Models
Select Controls and Countermeasures Based Upon Information Systems Security Standards
Understand the Security Capabilities of Information Systems
3:30pm-3:45pm Afternoon Break
3:45pm-5:00pm
Assess and Mitigate the Vulnerabilities of Security Architectures, Designs, and Solution Elements
Assess and Mitigate Vulnerabilities in Web-based Systems
Assess and Mitigate Vulnerabilities in Mobile Systems
Day 3
9am-10:30am
Assess and Mitigate Vulnerabilities in Embedded Devices and Cyber-Physical Systems
Apply Cryptography
Apply Secure Principles to Site and Facility Design
Design and Implement Facility Security
10:30am-10:45am Morning break
10:45-12:30pm
- 4. Communications and Network Security (Designing and Protecting Network Security)
Apply Secure Design Principles to Network Architecture
Securing Network Components
12:30pm-1:30pm Lunch
1:30-3:30pm
Design and Establish Secure Communication Channels
Prevent or Mitigate Network Attacks
3:30pm-3:45pm Afternoon Break
3:45pm-5:00pm
- 5. Identity and Access Management (Controlling Access and Managing Identity)
Course Outline :: Information Systems Security Professional::
Control Physical and Logical Access to Assets
Manage Identification and Authentication of People and Devices
Integrate Identity as a Service (IDaaS)
Day 4
9am-10:30am
Integrate Third-Party Identity Services
Implement and Manage Authorization Mechanisms
10:30am-10:45am Morning break
10:45-12:30pm
Prevent or Mitigate Access Control Attacks
Manage the Identity and Access Provisioning Life Cycle
12:30pm-1:30pm Lunch
1:30-3:30pm
- 6. Security Assessment and Testing (Designing, Performing, and Analyzing Security Testing)
Design and Validate Assessment and Test Strategies
Conduct Security Control Testing
3:30pm-3:45pm Afternoon Break
3:45pm-5:00pm
Collect Security Process Data
Conduct or Facilitate Internal and Third-Party Audits
Day 5
9am-10:30am
- 7. Security Operations (e.g., Foundational Concepts, Investigations, Incident Management, Disaster Recovery)
Understand and Support Investigations
Understand Requirements for Investigation Types
Conduct Logging and Monitoring Activities
Secure the Provisioning of Resources through Configuration Management
10:30am-10:45am Morning break
10:45-12:30pm
Understand and Apply Foundational Security Operations Concepts
Employ Resource Protection Techniques
Conduct Incident Response
Course Outline :: Information Systems Security Professional::
12:30pm-1:30pm Lunch
1:30-3:30pm
Operate and Maintain Preventative Measures
Implement and Support Patch and Vulnerability Management
Participate in and Understand Change Management Processes
Implement Recovery Strategies
Implement Disaster Recovery Processes
Test Disaster Recovery Plan
Participate in Business Continuity Planning
Implement and Manage Physical Security
Participate in Personnel Safety
3:30pm-3:45pm Afternoon Break
3:45pm-5:00pm
- 8. Software Development Security (Understanding, Applying, and Enforcing Software Security)
Understand and Apply Security in the Software Development Life Cycle
Enforce Security Controls in the Development Environment
Assess the Effectiveness of Software Security
Assess Software Acquisition Security
Programme scope, delivery arrangements and suitability are confirmed during enquiry.