What's In It For Me
Validate your knowledge and skills on Information Security. Gain a comprehensive, up-to-date knowledge on Information Security. Design, engineer, implement and manage your organisation's overall information security program to prevent cybersecurity attacks.
Course Overview
NTUC LearningHub Course Code: NICF020
SkillsConnect Code: CRS-Q-0032018-ICT
The CISSP certification is the ideal credential for you if you have proven deep technical and managerial skills, experience, and credibility to design, engineer, implement, and manage their overall information security program to protect organizations from growing sophisticated attacks. Backed by (ISC), the globally recognized, not-for-profit organization dedicated to advancing the information security field, the CISSP was the first credential in the field of information security to meet the stringent requirements of ISO/IEC Standard 17024.
CISSP is registered certification marks of (ISC), Inc.
Who Should Attend
The CISSP is ideal for you if you work in positions such as, but not limited to:
- Security Consultant
- Security Analyst
- Security Auditor
- Security Systems Engineer
- Security Manager
- Security Architect
- Network Architect
- IT Director / Manager
- Director of Security
- Chief Information Security Officer
Course Duration
5 Days / 39.75 Hours
Course Outline
Security and Risk Management
- Confidentiality, integrity, and availability concepts
- Security governance principles/ Compliance
- Legal and regulatory issues/ Professional ethic
- Security policies, standards, procedures and guidelines
Asset Security
- Information and asset classification/ Ownership
- Protect privacy/ Appropriate retention
- Data security controls/ Handling requirements
- Security Engineering (Engineering and Management of Security)
- Engineering processes using secure design principles
- Security models fundamental concepts/ Security evaluation models
- Security capabilities of information systems
- Security architectures, designs, and solution elements vulnerabilities
- Web-based systems vulnerabilities/ Mobile systems vulnerabilities
Security Engineering
- Engineering processes using secure design principles
- Security models fundamental concepts
- Security evaluation models/ Security capabilities of information systems
- Security architectures, designs, and solution elements vulnerabilities
- Web-based systems vulnerabilities/ Mobile systems vulnerabilities
- Embedded devices and cyber-physical systems vulnerabilities
- Cryptography/ Site and facility design secure principles
Communication and Network Security
- Secure network architecture design/ Secure network components
- Secure communication channels/ Network attacks
Identity and Access Management
- Physical and logical assets control
- Identification and authentication of people and devices
- Identity as a service/ Third-party identity services
- Access control attacks/ Identity and access provisioning lifecycle
Security Assessment and Testing
- Assessment and test strategies/ Security process data
- Security control testing/ Test outputs
- Security architectures vulnerabilities
Security Operations
- Investigations support and requirements/ Logging and monitoring activities
- Provisioning of resources/ Foundational security operations concepts
- Resource protection techniques/ Incident management
- Preventative measures/ Patch and vulnerability management
- Change management processes/ Recovery strategies
- Disaster recovery processes and plans
- Business continuity planning and exercises/ Physical security
- Personnel safety concerns
Software Development Security
- Security in the software development lifecycle
- Development environment security controls
- Software security effectiveness
- Acquired software security impact
Mode of Assessment
Students will be required to complete a paper-based NICF assessment during class.
Certification Obtained and Conferred by
Statement of Attainment (SOA) from SSG
Participants will receive the following SOA upon completion of training and assessment
- IT-SE-402S-1 Apply cryptographic standards
CISSP Certification Exam
This course will prepare you to sit for CISSP certification examination.
Students need to pass CISSP examination to attain the Certified Information Systems Security Professional (CISSP) certification from (ISC)2
CISSP Certification Exam Information
- Effective Date: 18th December 2017
- Length of Exam: 3 Hours
- No. of questions: 100 to 150
- Question Format: Multiple choice and advanced innovative questions
- Passing Grade: 700 out of 1000 points
For more details click here or for announcement click here.
On 14th December 2017, (ICS)2 has released an upgraded version of the exam outline to replace that of 2015. This will take effect from 1 April 2018.
Categories
More Information
- (Local Institution) NTUC LearningHub
Faizal
April 27, 2020 at 1:07 pmvery engaging course. i believe will be useful for my career advancement.