The CISSP (Certified Information Systems Security Professional) certification was developed to meet the current demands and growing needs of the computer industry.

This training course provides students with comprehensive, up-to-date knowledge that adheres to the (ISC)2 (International Information System Security Certification Consortium, Inc.) certification requirements – considered to be the gold-standard for security professionals.

This certification is essential for a career involving security tasks, and prepares you with the skills needed to protect your organisation from sophisticated cyber-attacks.

Students gain a solid background on security concerns, communications, infrastructure, basic cryptography and operations, as well as the hands-on experience needed to design, implement and manage a security program.

The Certified Information Systems Security Professional (CISSP) is the most globally recognized certification in the information security market. CISSP validates an information security professional’s deep technical and managerial knowledge and experience to effectively design, engineer, and manage the overall security posture of an organization. The broad spectrum of topics included in the CISSP Common Body of Knowledge (CBK) ensure its relevancy across all disciplines in the field of information security.

 

Course Outline

The 5-day course heavily focuses on the 8 fundamental domains of Information Security.

Domain 1: Security and Risk Management
1.1 Understand and apply concepts of confidentiality, integrity and availability
1.2 Evaluate and apply security governance principles
1.3 Determine compliance requirements
1.4 Understand legal and regulatory issues that pertain to information security in a global context
1.5 Understand, adhere to, and promote professional ethics
1.6 Develop, document, and implement security policy, standards, procedures, and guidelines
1.7 Identify, analyze, and prioritize Business Continuity (BC) requirements
1.8 Contribute to and enforce personnel security policies and procedures
1.9 Understand and apply risk management concepts
1.10 Understand and apply threat modeling concepts and methodologies
1.11 Apply risk-based management concepts to the supply chain
1.12 Establish and maintain a security awareness, education, and training program

Domain 2: Asset Security
2.1 Identify and classify information and assets
2.2 Determine and maintain information and asset ownership
2.3 Protect privacy
2.4 Ensure appropriate asset retention
2.5 Determine data security controls
2.6 Establish information and asset handling requirements

Domain 3: Security Architecture and Engineering
3.1 Implement and manage engineering processes using secure design principles
3.2 Understand the fundamental concepts of security models
3.3 Select controls based upon systems security requirements
3.4 Understand security capabilities of information systems (e.g., memory protection, Trusted Platform Module (TPM), encryption/decryption)
3.5 Assess and mitigate the vulnerabilities of security architectures, designs, and solution elements
3.6 Assess and mitigate vulnerabilities in web-based systems
3.7 Assess and mitigate vulnerabilities in mobile systems
3.8 Assess and mitigate vulnerabilities in embedded devices
3.9 Apply cryptography
3.10 Apply security principles to site and facility design
3.11 Implement site and facility security controls

Domain 4: Communication and Network Security
4.1 Implement secure design principles in network architectures
4.2 Secure network components
4.3 Implement secure communication channels according to design

Domain 5: Identity and Access Management (IAM)
5.1 Control physical and logical access to assets
5.2 Manage identification and authentication of people, devices, and service
5.3 Integrate identity as a third-party service
5.4 Implement and manage authorization mechanisms
5.5 Manage the identity and access provisioning lifecycle

Domain 6: Security Assessment and Testing
6.1 Design and validate assessment, test, and audit strategies
6.2 Conduct security control testing
6.3 Collect security process data (e.g., technical and administrative)
6.4 Analyze test output and generate report
6.5 Conduct or facilitate security audits

Domain 7: Security Operations
7.1 Understand and support investigations
7.2 Understand requirements for investigation types
7.3 Conduct logging and monitoring activities
7.4 Securely provisioning resources
7.5 Understand and apply foundational security operations concepts
7.6 Apply resource protection techniques
7.7 Conduct incident management
7.8 Operate and maintain detective and preventative measures
7.9 Implement and support patch and vulnerability management
7.10 Understand and participate in change management processes
7.11 Implement recovery strategies
7.12 Implement Disaster Recovery (DR) processes
7.13 Test Disaster Recovery Plans (DRP)
7.14 Participate in Business Continuity (BC) planning and exercises
7.15 Implement and manage physical security
7.16 Address personnel safety and security concerns

Domain 8: Software Development Security
8.1 Understand and integrate security in the Software Development Life Cycle (SDLC)
8.2 Identify and apply security controls in development environments
8.3 Assess the effectiveness of software security
8.4 Assess security impact of acquired software
8.5 Define and apply secure coding guidelines and standards

This training course is ideal for experienced information security professionals in Singapore who wish to expand their knowledge and gain an internationally recognised accreditation, including:

  • IT Consultants
  • Information Security Officers
  • Network Administrators
  • Security Consultants
  • Security Device administrators
  • Security Engineers
  • Security Managers
  • Security Policy writers
  • Privacy Officers

Exam Details

The structure of the CISSP certification examination is as follows:

No. of questions: 250 questions & advanced innovative questions
Duration: 6 hours
Passing mark: 700 out of 1000 points
Languages Available: English, French, German, Japanese, Simplified Chinese, Korean, Spanish, etc.
Location: Pearson Vue Testing Center

Prerequisite
Participants must either have a total of 5 years paid, full-time work experience in 2 or more of the 8 domains of the (ISC)2 CISSP Common Body of Knowledge (CBK), or hold a 4-year college degree equivalent.

Funding
This course is available as a funded course with support from schemes including SkillsFuture, UTAP, and company sponsorships. To check your eligibility to take this as a funded course, please send us an enquiry online or drop us a call.

Duration: 5 Days

Course Fee

Course Fee w/o GST $1,750.00
Course Fee w. GST $1,872.50
SME (Company Sponsored) – All Singaporean and Permanent Resident Employee $647.50
Singapore Citizens aged 40 years old and above $647.50
Singapore Citizen and Permanent Resident aged 21 years old and above $997,50

Exam Fee

  • Exam Voucher is optional and can be purchase separately for $1,240.00

Book Now

TOP