Training Calendar
หลักสูตรที่ได้รับการออกแบบเนื้อหาที่ครอบคลุม ทั้งทฤษฎี เทคนิค และสาระน่ารู้ที่ทันสมัยสอนโดยอาจารย์ผู้เชี่ยวชาญ และมีประสบการณ์ด้านความปลอดภัยของสารสนเทศโดยตรง
CISSP (Exam Prep.)
About this course
The CISSP has clearly emerged as THE key certification for security professionals. In fact, in an informal survey of information security jobs on a major employment Web site, over 70 percent of the positions required CISSP certification! Corporations are demanding experienced information security professionals with the certifications to prove it to protect their information and assets.
The CISSP Prep class was developed to meet current demands and the growing needs of the computer industry. This class provides the student with the level of knowledge needed as part of the (ISC)2 certification requirements for the Certified Information System Security Professional (CISSP) Certification. This certification is rapidly becoming a requirement for employment with security tasks. Students gain a solid background on security concerns, communications, infrastructure, basic cryptography, and operational
Module
Click a module to read the details.
Domain 1 : Security and Risk Management (Security, Risk,Compliance, Law, Regulations, and Business Continuity)
- Confidentiality, integrity, and availability concepts
- Security governance principles
- Compliance
- Legal and regulatory issues
- Professional ethics
- Security policies, standards, procedures and guidelines
- Business continuity requirements
- Personnel security policies
- Risk management concepts
- Threat modeling
- Risk considerations
- Security education, training, and awareness
Domain 2 : Asset Security (Protecting Security of Assets)
- Information and asset classification
- Ownership (e.g. data owners, system owners)
- Protect privacy
- Appropriate retention
- Data security controls
- Handling requirements (e.g. markings, labels,storage)
Domain 3 : Security Engineering (Engineering and Management of Security)
- Engineering processes using secure design principles
- Security models fundamental concepts
- Security evaluation models
- Security capabilities of information systems
- Security architectures, designs, and solution elements vulnerabilities
- Web-based systems vulnerabilities
- Mobile systems vulnerabilities
- Embedded devices and cyber-physical systems vulnerabilities
- Cryptography
- Site and facility design secure principles
- Physical security
Domain 4 : Communication and Network Security (Designing and Protecting Network Security)
- Secure network architecture design (e.g. IP & non-IP protocols, segmentation)
- Secure network components
- Secure communication channels
- Network attacks
Domain 5 : Identity and Access Management (Controlling Access and Managing Identity)
- Physical and logical assets control
- Identification and authentication of people and devices
- Identity as a service (e.g. cloud identity)
- Third-par ty identity services (e.g. on-premise)
- Access control attacks
- Identity and access provisioning lifecycle (e.g. provisioning review)
Domain 6 : Security Assessment and Testing (Designing, Performing, and Analyzing Security Testing)
- Assessment and test strategies
- Security process data (e.g. management and operational controls)
- Security control testing
- Test outputs (e.g. automated, manual)
- Security architectures vulnerabilities
Domain 7 : Security Operations (Foundational Concepts, Investigations, Incident Management, and Disaster Recovery)
- Investigations support and requirements
- Logging and monitoring activities
- Provisioning of resources
- Foundational security operations concepts
- Resource protection techniques
- Incident management
- Preventative measures
- Patch and vulnerability management
- Change management processes
- Recovery strategies
- Disaster recovery processes and plans
- Business continuity planning and exercises
- Physical security
- Personnel safety concerns
Domain 8 : Software Development Security (Understanding,Applying, and Enforcing Software Security)
- Security in the software development life cycle
- Development environment security controls
- Software security effectiveness
- Acquired software security impact
Who should Attend?
01
02
03
04
05
06
07
08
09
10
11
Certification and Accreditation
Complete the Certification Application Process
Once you receive notification that you have successfully passed the exam, you can start the online certification application process. This process attests that your assertions regarding professional experience are true, that you are in good standing within the cybersecurity industry. It also contains the agreements to abide by the ISC2 Code of Ethics and privacy policy.
Agree to the ISC2 Code of Ethics
All information security professionals who are certified by ISC2 recognize that such certification is a privilege that must be both earned and maintained. All ISC2 members are required to commit to fully support ISC2 Code of Ethics Canons:
- Protect society, the common good, necessary public trust and confidence, and the infrastructure.
- Act honorably, honestly, justly, responsibly, and legally.
- Provide diligent and competent service to principles.
- Advance and protect the profession.
Pay Your First Annual Maintenance Fee
Annual Maintenance Fees (AMFs) are used by ISC2 to support the costs of maintaining the ISC2 certifications and related support systems.
Certified Members AMFs
ISC2 certified members pay a single AMF of U.S. $135 which is due each year upon the anniversary of their certification date. Members only pay a single AMF of U.S. $135 regardless of how many certifications they earn. AMFs for members with multiple certifications are due on their earliest certification anniversary.
Associates of ISC2 AMFs
Associates of ISC2 pay an AMF of U.S. $50 which is due each year upon the anniversary of achieving their associate status.
A Global Community of Cybersecurity Leaders
Once you are certified and become an ISC2 member, you’re a part of a global community of cybersecurity professionals focused on inspiring a safe and secure cyber world. In addition to that extensive network, a wealth of continuing education opportunities help you keep your skills sharp, informed of the latest trends and best practices, and ensures your expertise remains relevant throughout your career. Learn more about ISC2 member benefits.
Examination
The CISSP exam outline provides details on the eight domains covered by the examination.
CISSP Domains
Domain 1. Security and Risk Management
Domain 2. Asset Security
Domain 3. Security Architecture and Engineering
Domain 4. Communication and Network Security
Domain 5. Identity and Access Management (IAM)
Domain 6. Security Assessment and Testing
Domain 7. Security Operations
Domain 8. Software Development Security
View the CISSP Exam Outline to review the domains and weights, as well as translated versions.
Necessary Work Experience
To qualify for this cybersecurity certification, you must pass the exam and have at least five years of cumulative, paid work experience in two or more of the eight domains of the ISC2 CISSP Exam Outline.
Learn more about CISSP Experience Requirements and how you may be able to satisfy one year of required work experience with a relevant four-year college degree or if you hold an approved credential.
Don’t have enough experience yet? You can still pass the CISSP exam and become an Associate of ISC2 while you earn the required work experience.
Training Info
Date :
Time :
Duration : 5 Days
Venue: Grande Centre Point Lumphini 16th Floor,1188 Rama IV Road,
Thungmahamek, Sathon, Bangkok 10120
Training price : 38,000 Baht (Ex.Vat)
02 670 8980-4 ext. 321, 322, 323
Bookings are closed for this event.
เพื่อรับคำปรึกษาข้อมูลเพิ่มเติม