Model Online / On-Site
Duration
Modules 5 modules

Course Objective & Scope

The (ISC)² CISSP exam tests not just technical knowledge, but how technical controls align with enterprise risk management, regulatory compliance and business continuity. This comprehensive preparation programme covers all 8 domains of the current CISSP Exam Outline and reinforces the 'think like a manager' decision-making mindset through realistic scenario questions.

At the end of each domain, participants work through multi-layered practice questions, apply distractor-elimination techniques and assemble a structured study roadmap and readiness checklist targeting their individual gaps.

Who Should Attend?

  • Information security managers, aspiring CISOs and security architects preparing for the CISSP exam
  • Senior systems, network, application security and IT audit/GRC professionals
  • Practitioners transitioning from hands-on technical roles into security leadership or architecture
  • Prerequisite: several years of practical experience in information security or related IT domains

Key Takeaways

  • Integrate core concepts and architectural relationships across all 8 domains of the CISSP CBK
  • Evaluate security decisions through the lens of enterprise risk management, cost/benefit and business alignment
  • Analyse cryptography, formal security models (Bell-LaPadula, Biba, Clark-Wilson), network and IAM architectures at exam depth
  • Assess security operations, business continuity (BIA, RPO/RTO) and software development security from a governance perspective
  • Apply question-deconstruction and pacing strategies tailored to the Computerized Adaptive Testing (CAT) format

Curriculum

Security & Risk Management and Asset Security (Domains 1 & 2)
  • Governance, compliance, ethics, quantitative/qualitative risk analysis (ALE, SLE, ARO) and business continuity policies
  • Data classification, data lifecycle, ownership roles (Data Owner/Custodian) and privacy protection controls
Security Architecture and Engineering (Domain 3)
  • Secure design principles, security models (Bell-LaPadula, Biba), TPM/HSM and Common Criteria evaluation
  • Symmetric/asymmetric cryptography, PKI, cryptographic attacks and physical/facility security design
Communication & Network Security and IAM (Domains 4 & 5)
  • OSI/TCP-IP layer security, IPsec/TLS, wireless networks, SDN, Zero Trust and micro-segmentation
  • Identity lifecycle, federation (SAML, OIDC, OAuth), access control models (DAC, MAC, RBAC, ABAC) and PAM
Security Assessment & Testing and Security Operations (Domains 6 & 7)
  • Vulnerability assessments, penetration testing methodology, SOC reports (SOC 1/2/3) and security audits
  • Incident response, forensic chain of custody, SIEM/SOAR, disaster recovery (DRP, RTO, RPO, WRT, MTD) and backup strategies
Software Development Security and Exam Strategy (Domain 8)
  • Security across SDLC models, OWASP risks, database security, CI/CD and third-party software acquisition
  • 'Think like a manager' question drills, CAT exam dynamics and a personal readiness checklist

Other Courses in This Category

  • Cybersecurity Fundamentals

    The CIA triad, modern threat vectors, identity and access management, network security and baseline hardening practices for IT and software teams who need to identify and mitigate enterprise security risks.

    Cybersecurity Corporate
    Live Course
    5 modules
    View
  • Zero Trust Architecture and Implementation

    Identity, device posture, network micro-segmentation and continuous verification using NIST SP 800-207 and the CISA Zero Trust Maturity Model for infrastructure and security architects planning enterprise adoption.

    Cybersecurity Corporate
    Live Course
    5 modules
    View
  • Application Security (AppSec) and Secure SDLC

    OWASP Top 10, threat modeling, secure coding, SAST/DAST/SCA integration and Secure SDLC controls for software and AppSec teams aiming to find and fix vulnerabilities before production.

    Cybersecurity Corporate
    Live Course
    5 modules
    View
  • API Security: OWASP API Top 10, OAuth 2.0 and Gateway Controls

    OWASP API Security Top 10, BOLA/BFLA, OAuth 2.1 and JWT security, GraphQL/gRPC attack surfaces and API gateway controls for engineering and security teams protecting enterprise APIs.

    Cybersecurity Corporate
    Live Course
    5 modules
    View
  • Software Supply Chain Security: SBOM, SLSA and CI/CD Hardening

    Open-source dependency risks, SBOMs (CycloneDX/SPDX), the SLSA framework, artifact signing with Sigstore/Cosign and CI/CD hardening for DevSecOps and platform teams securing the software supply chain.

    Cybersecurity Corporate
    Live Course
    5 modules
    View
  • Red Team, Blue Team and Purple Team Cyber Defense Exercises

    MITRE ATT&CK-based adversary emulation, detection engineering and collaborative Purple Team exercises for offensive and defensive security teams closing visibility and detection gaps together.

    Cybersecurity Corporate
    Live Course
    5 modules
    View

Get in touch