CISSP Fast Track Course

Topics covered on the 5 day CISSP Fast Track course

The 10 CISSP Domains:

• Security Management Practices
• Access Control Systems
• Telecommunications and Network Security
• Cryptography
• Security Architecture and Models
• Operations Security
• Application and System Development
• Business Continuity and Disaster Recovery Planning
• Law, Investigation and Ethics
• Physical Security

Security Management Practices

• Types of Security Controls
• Components of a Security Program
• Security Policies, Standards, Procedures, and Guidelines
• Risk Management and Analysis
• Threats, Vulnerabilities and Corresponding Administrative Controls

Access Control Systems and Methodology

• Identification, Authentication, and Authorization Techniques and Technologies
• Biometrics, Smart Cards, and Memory Cards
• Single Sign-On Technologies and Their Risks
• Discretionary versus Mandatory Access Control Models
• Rule-based and Role-based Access Control
• Object Reuse Issues and Social Engineering
• Specific Attacks and Countermeasures

Cryptography

• Historical Uses of Cryptography
• Block and Stream Ciphers
• Explanation and Uses of Symmetric Key Algorithms
• Explanation and Uses of Asymmetric Key Algorithms
• Public Key Infrastructure Components
• Data Integrity Algorithms and Technologies
• IPSec, SSL, SSH, and PGP
• Secure Electronic Transactions
• Key Management

Physical Security

• Facility Location and Construction Issues
• Physical Vulnerabilities and Threats Hardware Metrics and Backup Options
• Electrical Power Issues and Solutions
• Fire Detection and Suppression
• Fencing, Lighting, and Perimeter Protection
• Physical Intrusion Detection Systems

Enterprise Security Architecture

• Critical Components of Every Computer
• Processes and Threads
• The OSI Model
• Operating System Protection Mechanisms
• Ring Architecture and Trusted Components
• Virtual Machines, Layering, and Virtual Memory
• Access Control Models
• Certification and Accreditation
• Covert Channels and Types of Attacks
• Buffer Overflows and Data Validation Attacks

Law, Investigation, and Ethics

• Different Ethics Sets
• Computer Criminal Profiles
• Types of Crimes
• Liability and Due Care Topics
• Privacy Laws and Concerns
• Complications of Computer Crime Investigation
• Types of Evidence and How to Collect It
• Forensics
• Legal Systems

Telecommunications, Networks, and Internet Security

• TCPIP Suite
• LAN, MAN, and WAN Topologies and Technologies
• Cable Types and Issues
• Broadband versus Baseband Technologies
• Ethernet and Token Ring
• Network Devices
• Firewall Types and Architectures
• Dial-up and VPN Protocols
• DNS and NAT Network Services
• FDDI and SONET
• X.25, Frame Relay, and ATM
• Wireless LANs and Security Issues
• Cell Phone Fraud
• VoIP
• Types of Attacks

Business Continuity Planning

• Roles and Responsibilities
• Liability and Due Care Issues
• Business Impact Analysis
• Identification of Different Types of Threats
• Development Process of BCP
• Backup Options

Applications & Systems Development

• Software Development Models
• Prototyping and CASE Tools
• Object-Oriented Programming
• Middleware Technologies
• ActiveX, Java, OLE, and ODBC
• Database Models
• Relational Database Components
• CGI, Cookies, and Artificial Intelligence
• Different Types of Malware

Operations Security

• Operations Department Responsibilities
• Personnel and Roles
• Media Library and Resource Protection
• Types of Intrusion Detection Systems
• Vulnerability and Penetration Testing
• Facsimile Security
• RAID, Redundant Servers, and Clustering