Certified Information Systems Security Professional

What Will You Learn?

• Upon successful completion of this program, participants will achieve the following capabilities:
• 1. Grasp and apply the fundamentals of risk assessment, risk analysis, data classification, and security awareness. Implement risk management principles, encompassing risk avoidance, risk acceptance, risk mitigation, and risk transference.
• 2. Employ a comprehensive and rigorous methodology to describe the current and/or future structure and functioning of an organization's security processes, information security systems, personnel, and organizational sub-units. Align these practices with the organization's core goals and strategic direction. Address the frameworks, policies, concepts, principles, structures, and standards crucial for safeguarding information assets, while also assessing the effectiveness of such protection. Establish the foundation of a proactive security program ensuring the safeguarding of an organization's information assets.
• 3. Utilize a comprehensive and rigorous approach to delineate the current and/or future structure and behavior of an organization's security processes, information security systems, personnel, and organizational sub-units. Ensure that these practices align with the organization's core goals and strategic direction. Explore the principles, means, and techniques of applying mathematical algorithms and data transformations to uphold information integrity, confidentiality, and authenticity.
• 4. Comprehend the structures, transmission methods, transport formats, and security measures employed for providing confidentiality, integrity, and availability during transmissions over private and public communications networks and media. Identify quantifiable and qualifiable risks to support the development of business cases for driving proactive security within the enterprise.
• 5. Enhance visibility in identifying potential alterations to data or system information, which could impact the integrity of valuable assets. Correlate an entity (e.g., person or computer system) with the corresponding actions it takes concerning crucial assets, thereby gaining a comprehensive understanding of the organization's security posture.
• 6. Strategize technology development while considering risk factors, evaluate system design in alignment with mission requirements, and determine the role of competitive prototyping and other evaluation techniques in the overall process.
• 7. Safeguard and regulate information processing assets in both centralized and distributed environments. Execute daily tasks essential to maintain reliable and efficient security services.
• 8. Understand the Software Development Life Cycle (SDLC) and its security implications. Identify suitable security controls for the development environment and assess the efficacy of software security measures.