CISSP Class | CISSP Certification Class | CISSP Class | CISSP Exam
SU's Free Practice Tests for REALLY FREE! FREE CISSP® practice exams

Security University's CISSP® Training Class - GREAT Pricing - ask us!
2 attendees for 1 class fee of $2,495 (must attend same class) or $1,995 per attendee
- Register now! Ken Cutle is AWESOME! These CISSP classes sell out fast and better than ever!
KEN CUTLER joins Security University Director of CISSP®Training check out the video's below!
Instructor Led VIDEO CISSP Training on iPad2 $3,000 includes 5 day class
Train with the company that Inspires Utmost Competence
CJ Howell, Pentagon - "I can say this course was really a treat! KEN BROUGHT REAL WORLD EXPERIENCE TO THE CLASS AND HE HAS A WONDERFUL PERSONALITY. I really enjoyed this course and in the near future I need continuing education courses I would consider taking classes at this installation!"
Register for CISSP® Training class with your e-Study iPad2 Today!
99% Pass Rate! Using your iPad2 w/ SU Free Practice Tests, CISSP ebook, U can quiz anywhere, any time.
call today 877-357-7744 or register online.
Andy's iPad eStudy CISSP® Story
"Hi Sondra, ( CEO Security University) I just thought I'd follow up with an even bigger thank you for the Security University CISSP® Prep/ iPad2 training program. I know that even after having an audio training program in my car and having read the entire CISSP® book that I would not have passed without your program. (This was reinforced by my lousy scores on the practice test) Mr. Cutler was a great instructor and coupled with the iPad2 tools and SU e-book resources provided, review sheets, and the 11th hour guide Ken recommended, it all turned the trick. You can add my name to your list of "Passed the first time" students."
Easy to understand, 5-day CISSP® Training curriculum with intense (daily) online quizzes ensure you conquer the 10 domains and successfully pass the CISSP® exam the first time.
99% Pass the first time, OR return for FREE!
The SU CISSP® Training class effectively prepares information security professionals to pass the rigorous six-hour Certified Information Systems Security Professional [CISSP® ] examination. This SU CISSP® Training program offers each student a zero-distraction, fully-immersed CISSP® CBK training and certification experience that employs accelerated learning techniques to minimize time-to-proficiency while maximizing retention.
Remember, SU CISSP® Training Classes offers the finest Prep available in information security. Anywhere.
Why Security University? SU is internationally recognized, respected by the information security community at large, and well-received by employers. And for good reason, 98% of our students pass the exam on their first try. If you don't, come back to class for FREE
- You are taught byhighly qualified, very well known CISSP® Mr. Ken Culter ( Former CISO AMX )
- More CISSP's pass the first time they take the exam after the intensive 5 day prep class
- Accelerated learning techniques to focuse on long term information retention
- Mind Maps for each domain
- Multiple daily quizzes - from SU's Free Practice Tests
- Guarantees the highest quality of education and customer satisfaction or return for free
You will learn more. Effectively. Efficiently.
Don't forget to register at:
SU's Free Practice Tests for FREE CISSP® practice exams
Where do you go after CISSP®? Be More than Certified!
6,000 CISSP's are in stage II of the Q/ISP Certificate Program
| Class Price: |
$1,995 5,000+ quizz questions! ( $2,595 including exam voucher) |
| Time: |
8:30am -6pm |
| Location: |
check schedule |
| Prerequisites: |
TCPIP |
| CPE Credits: |
40 |
 |
Download the 2012 SU class RoadMap
Ask about On-Site classes |
| Instructor: |
CISSP, Q/EH, CISM CWNA CWSP, Security + |
Where Qualified Happens!
What places Security University's CISSP® training above all others?
- Ken Cutler is the ONLY CISSP Instructor with REAL World experience as a CISO (AMX)
- SU Student success is our only concern. We guarentee it.
- SU's Free Pratice Quizzes are fresh, directly relate to each domain and CURRENT!
- Our daily quizzes and course materials are always updated with the latest information on the exam objectives.
- Robust course materials that cater to your individual learning styles for a successful learning experience.
- Build your “personal” exam prep guide based on what you need to know to pass the exam the first time.
- Expert mentoring by xCIO's and veteran security professionals before and after class guides you to success.
- You success increases with hands-on Quizzes to engage U in materials, then quiz again is the secret to your exam success.
- 100+ retired exam questions to familiarize you with the exam style.
What You Will Learn:
Tips for taking the exam &
SU Self Study Techniques
1. Information Security Governance and Risk Management
The identification of an organization's information assets and the development, documentation, and implementation of policies, standards, procedures, and guidelines. Management tools such as data classification and risk assessment/analysis are used to identify threats, classify assets, and to rate system vulnerabilities so that effective controls can be implemented.
- CIA
- Roles and Responsibilities - RACI
- Asset Management
- Taxonomy - Information Classification
- Risk Management
- Risk Analysis & Assessment
- Information Classification
- Policies, Procedures, Standards, Baselines & Guidelines
- Security Awareness Programs
- Certification and Accreditation
2. Access Control
Access controls are a collection of mechanisms that work together to create a security architecture to protect the assets of the information system.
- AAA
- Access to systems & data
- IPS intrusion prevention & IDS detection
- Audit trail monitoring
- Authentication Methods
- Authorization - DAC, RBAC, MAC
- Accounting - Logging, Monitoring, Auditing
- Central/Decentralized and Hybrid Management
- Single Sign-on - Kerberos, Radius, Diameter, TACACS
- Threats
- Vulnerabilities - Emanations, Impersonation, Rouge Infrastructure, Social Engineering
3 Cryptography
Cryptography domain addresses the principles, means, and methods of disguising information to ensure its integrity, confidentiality and authenticity.
- Terminology
- Cryptosystems
- Ciphers
- Algorithms
- Hashing
- Public Key Crypto
- Digital Signatures
- Symmetric/ Asymmetric
- PKI
- Internet Security
- Cryptosystems - SSL, S/MIME, PGP
- Cryptanalysis
4. Physical (Environmental) Security
The physical security domain provides protection techniques for the entire facility, from the outside perimeter to the inside office space, including all of the information system resources.
- Buildings, and related infrastructure against threatsTerminology
- Technical controls - access controls, intrusion detection system, and monitoring system
- Supporting facilities - heating/cooling, electrical plant, and water system
- Facility Design
- Fire Safety
- Electrical Security
- HVAC
- Perimeter Security - Fences, Gates, Lighting
- Physical facility - buildings and structures housing computer facilities
- Physical Access Control - Transponders, Badges, Swipe Cards
- Theft
- Intrusion Detection - CCTV, Alarms, Guards, & Dogs
5. Security Architecture and Design
Contains the concepts, principles, structures, and standards used to design, monitor, and secure operating systems, equipment, networks, applications and those controls used to enforce various levels of availability, integrity, and confidentiality.
- Identify the security issues and controls with architectures and designs.
- Describe the principles of common computer and network organizations, enterprise architecture and designs.
- Layering, Data Hiding and Abstraction
- Processors
- Memory - Segmentation/Rings, Types of Memory
- Operating Systems
- Defines and understand system models
- Assurance - TCSEC, ITSEC, CC
- Architecture Problems - Covert Channels + TOC/TOU, Object Reuse
6. Software Development Security
Addresses the important security concepts that apply to application software development. It outlines the environment where software is designed and developed and explains the critical role software plays in providing information system security.
- General Security Principles
- Database
- Applications
- Artificial Intelligence Models
- SDL
- Programming/Data Attacks
- Malware
- Threats
- Real World Issues
- Change Management
- Database Security
- Mobil Code
7. Telecommunications and Network Security domain address:
Network structures; transmission methods; transport formats; security measures used to provide availability, integrity, and confidentiality; and authentication for transmissions over private and public communications networks and media
- Network Structures
- Transmission methodology
- Transport formats
- OSI/DoD TCP/IP Models
- TCP/UDP/ICMP/IP
- Ethernet
- Devices - Routers/Switches/Hubs
- Firewalls
- Wireless
- WAN Technologies - X.25/Frame Relay/ PPP /ISDN/DSL/Cable
- Voice - PBX/Cell Phones/VOIP
- IPSec
- Network Vulnerabilities
8. Legal, Regulations, Investigations, and Compliance domain addresses:
Computer crime laws and regulations and the measures and technologies used to investigate computer crime incidents.
- Computer crime laws and regulations
- The measures and technologies used to investigate computer crime incidents
- Ethics - Due Care/Due Diligence
- Intellectual Property
- Incident Response
- Forensics
- Evidence
- Laws - HIPAA, GLB, SOX
9. Business Continuity & Disaster Recovery Planning
For the preservation and recovery of business operations in the event of outages.
- Policy
- Roles and Teams
- Business Continuity Planning
- Business Impact Assessment
- Recovery Strategy
- Recovery Plan Development and testing
- Emergency Response Planning and testing
- Data Backups, Vaulting, Journaling, Shadowing
- Backups & Off-Site Storage
- Software Escrow Arrangements
- External Communications
- Utilities
- Logistics & Supplies
- Emergency Response
- Required Notifications /Testing
10. Operations Security
Used to identify the controls over hardware, media, and the operators and administrators with access privileges to any of these resources. Audit and monitoring are the mechanisms, tools, and facilities that permit the identification of security events and subsequent actions to identify the key elements and report the pertinent information to the appropriate individual, group, or process.
- Change Control/Configuration Management
- Dual Control, Separation of Duties, Rotation of Duties
- Information Security Controls
- Violation analysis
- Audit trails/reporting
- Resource Protection
- Appropriate administrator/operator privilege
- Recovery procedures
- Attack methods
- Vulnerability Assessment and Pen-Testing
Certification
CISSP® (Certified Information Systems Security Professional) Certification is based on the CBK (Common Body of Knowledge), which comprises ten subject domains that are compiled and maintained through ongoing peer review by subject matter experts.
CISSP® candidates must meet the following requirements prior to taking the CISSP examination:
• Have a minimum of five years of direct full-time security professional work experience
in two or more of the ten domains of the (ISC)2® CISSP CBK®, or four years of direct
full-time security professional work experience in two or more of the ten domains
of the CISSP CBK with a college degree. Alternatively there is a one-year waiver of
the professional experience requirement for holding an additional credential on the
(ISC)2-approved list.
• Complete the Candidate Agreement, attesting to the truth of his or her assertions
regarding professional experience and legally commit to adhere to the (ISC)2 Code of Ethics.
• Successfully answer four questions regarding criminal history and related background
CISSP® is a registered trademark of (ISC)²®
SU CISSP® Prep classes are not endorsed, sponsored or delivered by (ISC)²®.
Disclaimer
CISSP® is a registered trademark of (ISC)²® Inc (International Information Systems Security Certification Consortium) Inc. The materials for the Security University classes have been developed specifically for SU and are not endorsed, sponsored or delivered by (ISC)²®. The goal of the course is to prepare security professionals for the CISSP® exam by covering the ten domains defined by (ISC)²®.
Send group inquiries to: cissp@securityuniversity.net
|