Meetings Stub Page [mx-stub]
Certified Information Security Systems Professional (CISSP)
Agenda
1 - SECURITY AND RISK MANAGEMENT
- Security Governance Principles
- Compliance
- Professional Ethics
- Security Documentation
- Risk Management
- Threat Modeling
- Business Continuity Plan Fundamentals
- Acquisition Strategy and Practice
- Personnel Security Policies
- Security Awareness and Training
2 - ASSET SECURITY
- Asset Classification
- Privacy Protection
- Asset Retention
- Data Security Controls
- Secure Data Handling
3 - SECURITY ENGINEERING
- Security in the Engineering Lifecycle
- System Component Security
- Security Models
- Controls and Countermeasures in Enterprise Security
- Information System Security Capabilities
- Design and Architecture Vulnerability Mitigation
- Vulnerability Mitigation in Embedded, Mobile, and Web-Based Systems
- Cryptography Concepts
- Cryptography Techniques
- Site and Facility Design for Physical Security
- Physical Security Implementation in Sites and Facilities
4 - INFORMATION SECURITY MANAGEMENT GOALS
- Organizational Security
- The Application of Security Concepts
5 - INFORMATION SECURITY CLASSIFICATION AND PROGRAM DEVELOPMENT
- Information Classification
- Security Program Development
6 - RISK MANAGEMENT AND ETHICS
- Risk Management
- Ethics
7 - SOFTWARE DEVELOPMENT SECURITY
- Software Configuration Management
- Software Controls
- Database System Security
8 - CRYPTOGRAPHY
- Ciphers and Cryptography
- Symmetric-Key Cryptography
- Asymmetric-Key Cryptography
- Hashing and Message Digests
- Email, Internet, and Wireless Security
- Cryptographic Weaknesses
9 - PHYSICAL SECURITY
- Physical Access Control
- Physical Access Monitoring
- Physical Security Methods
- Facilities Security