Cissp Course

Lesson 1 • Risk Management Fundamentals

Introduces risk identification, assessment, and treatment options. Establishes the risk management lifecycle used throughout the course.

Lesson 2 • Security Frameworks and Standards

Examines widely adopted security frameworks and control catalogs. Enables practitioners to select and map controls to organizational needs.

Lesson 3 • Legal, Regulatory, and Ethical Obligations

Surveys data protection regulations, intellectual property, and professional ethics. Grounds security decisions in legal and ethical accountability.

Lesson 4 • Core Security Concepts and Terminology

Defines confidentiality, integrity, availability, authenticity, and non-repudiation. Provides the vocabulary needed across all subsequent domains.

Lesson 1 • Information and Asset Classification

Defines classification schemes, labeling standards, and ownership roles. Connects asset value to appropriate protection requirements.

Lesson 2 • Asset Inventory and Management

Establishes processes for tracking hardware, software, and data assets. Supports risk management by maintaining accurate asset inventories.

Lesson 3 • Privacy Protection Principles

Covers personally identifiable information handling, consent, and data minimization. Integrates privacy requirements into asset security programs.

Lesson 1 • Cryptography Fundamentals

Introduces symmetric, asymmetric, and hashing algorithms with their use cases. Builds the cryptographic knowledge required for secure communications and storage.

Lesson 2 • Vulnerability Assessment in Architecture

Applies threat modeling and architecture review to identify design weaknesses. Prepares students to evaluate security posture before deployment.

Lesson 3 • Secure Design Principles

Covers least privilege, defense in depth, fail-safe defaults, and separation of duties. Provides the design philosophy applied to all engineered systems.

Lesson 4 • Security Models and Architectures

Examines formal security models such as Bell-LaPadula and Biba. Connects theoretical models to real-world system design decisions.

Lesson 1 • Secure Network Design

Covers segmentation, DMZ design, VLANs, and zero-trust principles. Translates architecture concepts into practical network security layouts.

Lesson 2 • Network Attacks and Countermeasures

Analyzes common network attack vectors and corresponding defensive controls. Bridges theoretical knowledge to practical threat mitigation.

Lesson 3 • Firewalls, IDS, and IPS

Examines firewall types, intrusion detection, and prevention technologies. Equips students to select and configure perimeter defense tools.

Lesson 4 • Secure Communications and VPNs

Addresses encrypted tunneling, VPN protocols, and wireless security standards. Ensures confidentiality and integrity of data in transit.

Lesson 1 • Authentication Methods and Factors

Covers passwords, MFA, biometrics, and certificate-based authentication. Enables selection of appropriate authentication strength for each context.

Lesson 2 • Privileged Access Management

Addresses privileged account risks, just-in-time access, and session monitoring. Reduces insider threat exposure through controlled privilege elevation.

Lesson 3 • Access Control Models

Examines DAC, MAC, RBAC, and ABAC models with their trade-offs. Connects model selection to organizational structure and risk tolerance.

Lesson 4 • Identity Management Concepts

Defines identity proofing, provisioning, and the identity lifecycle. Establishes the foundation for all access control mechanisms.

Lesson 1 • Penetration Testing Methodology

Walks through reconnaissance, exploitation, and post-exploitation phases. Provides a structured approach to simulating real-world attacks.

Lesson 2 • Security Audits and Reviews

Addresses log reviews, code reviews, and compliance audits. Connects audit findings to governance and risk management processes.

Lesson 3 • Vulnerability Scanning and Analysis

Examines automated scanning tools, false positive management, and CVSS scoring. Builds proficiency in identifying and prioritizing technical vulnerabilities.

Lesson 4 • Reporting and Remediation Tracking

Covers finding classification, executive reporting, and remediation workflows. Ensures assessment value is realized through actionable follow-through.

Lesson 1 • Security Operations Center Functions

Defines SOC roles, monitoring workflows, and alert triage processes. Establishes the operational context for all detection and response activities.

Lesson 2 • Incident Response Lifecycle

Covers preparation, detection, containment, eradication, and recovery phases. Provides a repeatable framework for managing security incidents.

Lesson 3 • Threat Hunting and Advanced Detection

Introduces hypothesis-driven threat hunting and behavioral analytics. Advances detection capabilities beyond reactive alert-based monitoring.

Lesson 4 • Digital Forensics Fundamentals

Addresses evidence acquisition, chain of custody, and forensic analysis techniques. Ensures legally defensible investigation practices.

Lesson 1 • Common Software Vulnerabilities

Examines OWASP Top 10, injection flaws, and authentication weaknesses. Enables developers and security teams to recognize and prevent common defects.

Lesson 2 • Secure Coding Practices

Covers input validation, error handling, and secure API design principles. Translates vulnerability knowledge into actionable coding standards.

Lesson 3 • Secure SDLC Integration

Maps security activities to each SDLC phase from requirements through maintenance. Establishes security as a continuous development responsibility.

Lesson 4 • Application Security Testing

Addresses SAST, DAST, and interactive testing tools within CI/CD pipelines. Automates security validation to catch defects early and continuously.