CISSP Certification & Training in Chicago, Illinois

Risk and Security Management

• Recognize, uphold, and support professional ethics
• Understanding and utilising security principles
• Analyze and put security governance ideas into practice
• Analyze compliance and additional requirements.
• Recognize the legal and regulatory concerns that concern information security from a comprehensive perspective.
• Recognize the demands of various sorts of investigations (i.e., administrative, criminal, civil, regulatory, and industry standards)

Asset Protection

• Determine and categorise the assets and information
• Specify the conditions for handling information and assets.
• Secure resource provision
• Control the data lifecycle
• Make that the right assets are kept (such as End-of-Life (EOL) and End-of-Support (EOS) assets).
• Establish data security measures and required compliance.

Security Engineering and Architecture

• Using secure design concepts, conduct research, put them into practice, and oversee engineering processes
• Recognize the underlying ideas behind security models (e.g., Biba, Star Model, Bell-LaPadula)
• Choosing controls based on the needs for system security
• Recognize the information systems (IS) security features, such as memory protection, Trusted Platform Modules (TPM), and encryption and decryption.
• Determine and address the security architecture, design, and solution aspects’ vulnerabilities.

Network and Communication Security

• Network architectures should be examined and implemented with secure design principles.
• Components for a secure network
• Implement secure communication methods as specified

Identification and Access Control (IAM)

• Manage the identity and authentication of people, devices, and services Manage physical and logical access to assets
• Federated identity using a service from a third party
• Manage and implement authorisation procedures
• Control the lifecycle of identity and access provisioning.

Security Testing and Assessment

• Create and verify assessment, testing, and auditing procedures
• Test the security controls
• Gather information about security procedures (e.g., technical and administrative)
• Analyse test results, then provide a report.
• Perform or assist with security audits

Security Procedures

• Recognize and abide by investigations
• Perform logging and monitoring tasks.
• Configuration Management (CM) should be used (e.g., provisioning, baselining, automation)
• Implement fundamental security operations principles.
• Protect resources by using
• Take incident management actions
• Operate and maintain investigative and defence mechanisms
• Support patch and vulnerability management implementation