https://www.isc2.org/trainingproviders/default.aspx#africaAffiliates

CISSP Training Course Outline

Leadership and Operations

The Official CISSP training provides a comprehensive review of the knowledge required to effectively design, engineer and manage the overall security posture of an organization. This training course will help students review and refresh their knowledge and identify areas they need to study for the CISSP exam. Taught by an (ISC)²-authorized instructor, the course features:

• Official (ISC)² courseware
• Flash Cards
• Post-course assessment
• Collaboration with classmates
  not currently available for self-paced course
• Real-world learning activities and scenarios

Who Should Attend

The training seminar is ideal for those working in positions such as but not limited to:

Course Agenda

• Domain 1: Security and Risk Management
• Domain 2: Asset Security
• Domain 3: Security Architecture and Engineering
• Domain 4: Communication and Network Security
• Domain 5: Identity and Access Management (IAM)
• Domain 6: Security Assessment and Testing
• Domain 7: Security Operations
• Domain 8: Software Development Security

Course Objectives

After completing this course, the student will be able to:

• Understand and apply fundamental concepts and methods related to the fields of information technology and security
• Align overall organizational operational goals with security functions and implementations
• Understand how to protect assets of the organization as they go through their lifecycle
• Understand the concepts, principles, structures and standards used to design, implement, monitor and secure operating systems, equipment, networks, applications and those controls used to enforce various levels of confidentiality, integrity and availability
• Implement system security through the application of security design principles and application of appropriate security control mitigations for vulnerabilities present in common information system types and architectures
• Understand the importance of cryptography and the security services it can provide in today’s digital and information age
• Understand the impact of physical security elements on information system security and apply secure design principles to evaluate or recommend appropriate physical security protections
• Understand the elements that comprise communication and network security coupled with a thorough description of how the communication and network systems function
• List the concepts and architecture that define the associated technology and implementation systems and protocols at Open Systems Interconnection (OSI) model layers 1-7
• Identify standard terms for applying physical and logical access controls to environments related to their security practice
• Appraise various access control models to meet business security requirements
• Name primary methods for designing and validating test and audit strategies that support business requirements
• Enhance and optimize an organization’s operational function and capacity by applying and utilizing appropriate security controls and countermeasures
• Recognize risks to an organization’s operational endeavors and assess specific threats, vulnerabilities and controls
• Understand the System Lifecycle (SLC) and the Software Development Lifecycle (SDLC) and how to apply security to it; identify which security control(s) are appropriate for the development environment; and assess the effectiveness of software security

Experience Requirements
Candidates must have a minimum of 5 years cumulative paid full-time work experience in 2 or more of the 8
domains of the CISSP CBK. Earning a 4-year college degree or regional equivalent or an additional credential
from the (ISC)² approved list will satisfy 1 year of the required experience. Education credit will only satisfy 1
year of experience.
A candidate that doesn’t have the required experience to become a CISSP may become an Associate of (ISC)²
by successfully passing the CISSP examination. The Associate of (ISC)² will then have 6 years to earn the 5
years required experience.

Accreditation
CISSP was the first credential in the field of information security to meet the stringent requirements of ANSI/
ISO/IEC Standard 17024.

Job Task Analysis (JTA)
(ISC)² has an obligation to its membership to maintain the relevancy of the CISSP. Conducted at regular
intervals, the Job Task Analysis (JTA) is a methodical and critical process of determining the tasks that are
performed by security professionals who are engaged in the profession defined by the CISSP. The results of
the JTA are used to update the examination. This process ensures that candidates are tested on the topic
areas relevant to the roles and responsibilities of today’s practicing information security professionals.

CISSP CAT Examination Information

The CISSP exam uses Computerized Adaptive Testing (CAT) for all English exams.
CISSP exams in all other languages are administered as linear, fixed-form exams

Length of exam  : 3 hours
Number of questions: 100 - 150
Question format : Multiple choice and advanced innovative questions
Passing grade : 700 out of 1000 points
Exam language availability: English
Testing center: (ISC)2 Authorized PPC and PVTC Select Pearson VUE Testing Centers
----------------------------------------------------------------------

Domains Average Weight
1. Security and Risk Management                        15%
2. Asset Security                                                10%
3. Security Architecture and Engineering              13%
4. Communication and Network Security              14%
5. Identity and Access Management (IAM)            13%
6. Security Assessment and Testing                     12%
7. Security Operations                                        13%
8. Software Development Security                       10%
                                                                Total: 100%