fbpx

CISSP Exam Preparation (Exam Excluded)

>CISSP Exam Preparation (Exam Excluded)

CISSP Exam Preparation (Exam Excluded)

Line

CISSP Exam Preparation (Exam Excluded)

Date/Time: 24/08/2020 - 28/08/2020 9:30 am - 4:30 pm

Category(ies)


About this course

The CISSP has clearly emerged as THE key certification for security professionals. In fact, in an informal survey of information security jobs on a major employment Web site, over 70 percent of the positions required CISSP certification! Corporations are demanding experienced information security professionals with the certifications to prove it to protect their information and assets.

The CISSP Prep class was developed to meet current demands and the growing needs of the computer industry. This class provides the student with the level of knowledge needed as part of the (ISC)2 certification requirements for the Certified Information System Security Professional (CISSP) Certification. This certification is rapidly becoming a requirement for employment with security tasks. Students gain a solid background on security concerns, communications, infrastructure, basic cryptography, and operational

Who should Attend?

CISSP certification is beneficial to IT consultants, managers, security policy writers, privacy officers, information security officers, network administrators, security device administrators, and security engineers.

Course Contents

Introduction
• Students & Trainer Introduction
• Who Should Take This Course?
• About (ISC)2
• CISSP Certification
• CISSP Examination
• CBK Review, Domain and Function Areas

 Domain 1: Security and Risk Management 
1.1 Understand and apply concepts of confidentiality, integrity and availability
1.2 Evaluate and apply security governance principles
1.3 Determine compliance requirements
1.4 Understand legal and regulatory issues that pertain to information security in a global context
1.5 Understand, adhere to, and promote professional ethics
1.6 Develop, document, and implement security policy, standards, procedures, and guidelines
1.7 Identify, analyze, and prioritize Business Continuity (BC) requirements
1.8 Contribute to and enforce personnel security policies and procedures
1.9 Understand and apply risk management concepts
1.10 Understand and apply threat modeling concepts and methodologies
1.11 Apply risk-based management concepts to the supply chain
1.12 Establish and maintain a security awareness, education, and training program
 Domain 2:  Asset Security
2.1 Identify and classify information and assets
2.2 Determine and maintain information and asset ownership
2.3 Protect privacy
2.4 Ensure appropriate asset retention
2.5 Determine data security controls
2.6 Establish information and asset handling requirements
Domain 3:  Security Architecture and Engineering 
3.1 Implement and manage engineering processes using secure design principles
3.2 Understand the fundamental concepts of security models
3.3 Select controls based upon systems security requirements
3.4 Understand security capabilities of information systems (e.g., memory protection, Trusted Platform Module (TPM), encryption/decryption)
3.5 Assess and mitigate the vulnerabilities of security architectures, designs, and solution elements
3.6 Assess and mitigate vulnerabilities in web-based systems
3.7 Assess and mitigate vulnerabilities in mobile systems
3.8 Assess and mitigate vulnerabilities in embedded devices
3.9 Apply cryptography
3.10 Apply security principles to site and facility design
3.11 Implement site and facility security controls
Domain 4: Communication and Network Security
4.1 Implement secure design principles in network architectures
4.2 Secure network components
4.3 Implement secure communication channels according to design
Domain 5:Identity and Access Management (IAM)
5.1 Control physical and logical access to assets
5.2 Manage identifcation and authentication of people, devices, and services
5.3 Integrate identity as a third-party service
5.4 Implement and manage authorization mechanisms
5.5 Manage the identity and access provisioning lifecycle
Domain 6: Security Assessment and Testing 
6.1 Design and validate assessment, test, and audit strategies
6.2 Conduct security control testing
6.3 Collect security process data (e.g., technical and administrative)
6.4 Analyze test output and generate report
6.5 Conduct or facilitate security audits
Domain 7:  Security Operations 
7.1 Understand and support investigations
7.2 Understand requirements for investigation types
7.3 Conduct logging and monitoring activities
7.4 Securely provisioning resources
7.5 Understand and apply foundational security operations concepts
7.6 Apply resource protection techniques
7.7 Conduct incident management
7.8 Operate and maintain detective and preventative measures
7.9 Implement and support patch and vulnerability management
7.10 Understand and participate in change management processes
7.11 Implement recovery strategies
7.12 Implement Disaster Recovery (DR) processes
7.13 Test Disaster Recovery Plans (DRP)
7.14 Participate in Business Continuity (BC) planning and exercises
7.15 Implement and manage physical security
7.16 Address personnel safety and security concerns
Domain 8:Software Development Security
8.1 Understand and integrate security in the Software Development Life Cycle (SDLC)
8.2 Identify and apply security controls in development environments
8.3 Assess the effectiveness of software security
8.4 Assess security impact of acquired software
8.5 Defne and apply secure coding guidelines and standards

CISSP CAT Examination Information 
The CISSP exam uses Computerized Adaptive Testing (CAT) for all English exams. CISSP exams in all other languages are administered as linear, fixed-form exams. You can learn more about CISSP CAT at www.isc2.org/certifcatons/CISSP-CAT.
Length of exam    3 hours
Number of questions  100 – 150
Question format  Multiple choice and advanced innovative questions
Passing grade   700 out of 1000 points
Exam language availability  English
Testing center  (ISC)2 Authorized PPC and PVTC Select Pearson VUE Testing Centers
Experience Requirements
 Candidates must have a minimum of 5 years cumulative paid  full-time work experience in 2 or more of the 8 domains of the CISSP CBK. Earning a 4-year college degree or regional equivalent or an additional credential from the (ISC)² approved list will satisfy 1 year of the required experience. Education credit will only satisfy 1 year of experience.
A candidate that doesn’t have the required experience to become a CISSP may become an Associate of (ISC)² by successfully passing the CISSP examination. The Associate of (ISC)² will then have 6 years to earn the 5 years required experience.

Training Info

Duration : 5 Days
Date : August 24 – 28, 2020
Time : 9.30-16.30 pm.
Venue : ACinfotec Training Center
16th Fl., Asia Centre Bldg., South Sathorn Rd.
Training Fee : 38,000 Baht (ex.vat 7%)
Exam Fee : 30,000 Baht (ex.vat 7%))
Tel. 02 670 8980-3
Email. [email protected]

 

 

Course Registration

This event is fully booked.

Terms & Conditions for Course Registration

Please read the following terms & conditions for course registration carefully. Upon clicking submit button, it is demonstrated that I/We understand and accept the registration and cancellation policies and procedures.

  • Full payment is required in advance prior to course commencement date.

Cancellation Policy

  • Payment is due upon registration
  • Delegates who cancel after registration, or who don’t attend, are liable to pay the full course fee and no refunds can be given
  • A replacement is always welcome

Disclaimer: ACinfotec reserves the right to change, postpone or cancel. Any part of its published programme due to unforeseen circumstances.

Line

ACinfotec > Driving IT Excellence

ACinfotec Co., Ltd. is Thailand’s leading expert provider of services, solutions and consultancy advices for governance, continuity, compliance, risk and security management based on various well-known international standards, best practices and regulations including ISO 27001, ISO 20000, ITIL®, ISO 22301, CMMI, ISO 15504, TIPA, PCI DSS, etc.

ACInfotec is a Licensed Affiliate Partner of Sapience Consulting Pte Ltd and acknowledges Sapience as the delivery partner for training and certification courses. ITIL is a [registered] trade mark of AXELOS Limited, used under permission of AXELOS Limited. All rights reserved.