IT17A13: (ISC)2 CERTIFIED INFORMATION SYSTEMS SECURITY PROFESSIONAL (CISSP) (SF) (SYNCHRONOUS E-LEARNING)
(ISC)2 CERTIFIED INFORMATION SYSTEMS SECURITY PROFESSIONAL (CISSP) (SF) (SYNCHRONOUS E-LEARNING)
Course Duration
Mode of Assessment
Students will be required to complete a written assessment during class.
Who Should Attend
The CISSP is ideal for experienced security practitioners or managers and executives that want to get into the field of information security. It recognizes the information security leaders who understand cybersecurity strategy and hands-on implementation and proves professionals have the knowledge and experience to design, develop and manage an organization’s overall security. Some of the job roles that the CISSP can perform include Chief Information Security Officer, Chief Information Officer, IT Director/Manager, Security Director, Security Manager, Security Auditor, Security Systems Engineer, Security/Network Architect, Security Consultant/Analyst.
Target Audience
The participants for this programme are likely to be:
• Cybersecurity specialists
• Security consultants
• Security managers
• Cybersecurity engineers
• Security analysts
• Cybersecurity architects
• Chief information security officers
• Security auditors
Targeted sector: Cybersecurity is a key support function that cuts across the horizontal section of all industry sectors. The role, accountable for establishing and driving cybersecurity strategies, policies, standards and guidelines according to organisation's needs and legislation.
What's In It for Me
- Learn about the Information Security Environment
- Learn about Asset Security
- Learn about Identity and Access Management
- Learn about Security Architecture and Engineering
- Learn about Communication and Network Security
- Learn about Software Development Security
- Learn about Security Assessment and Testing
- Learn about Security Operations
- Prepare for the (ISC)2 CISSP certification examination
- Better career opportunities in the Information Security industry
Course Overview
The five-days course will cover information security concepts and principles and how these can be aligned to business objectives to help organizations improve their cyber security posture. Proactive identifying cyber security risks and applying the appropriate security controls will help to reduce the impact to business operations. Implementation of appropriate security guidelines and protocols that is aligned to corporate security policies will be covered.
NTUC LearningHub have signed with (ISC)² as the official training provider in Singapore for all (ISC)2 courses. This partnership will allow NTUC LearningHub and (ISC)² to enhance the professional pipeline and quality of the cybersecurity workforce, and to raise awareness about the need for continuous improvement for specialized cybersecurity competencies in Singapore.
Course Schedule
Next available schedule
Course Objectives
Upon completing the course, students will be able to:
- Relate confidentiality, integrity, availability, non-repudiation, authenticity, privacy and safety to due care and due diligence
- Identify and select security assessment approaches, frameworks and standards
- Relate information security governance to organizational business strategies, goals, missions and objectives
- Identify the different types and categories of information security controls and their use.
- Compare and contrast the security operations characteristics of different types of governance and administrative controls
- Develop incident response policies and plans. Link incident response to needs for security controls and their operational use
- Understand internal, external and third party assessment and testing
- Explain how governance frameworks and processes relate to the operational use of information security controls
Pre-requisites
- Practicing security, ICT professional or anyone that has the necessary IT qualifications that wants to enter the field of Information Security.
- Below are the certification requirements, if you are taking the course just for knowledge, it is not mandatory to possess the below requirements:
*Find out more about getting certified (https://www.isc2.org/Certifications/CISSP/experience-requirements)
Candidates must have a minimum of five years cumulative paid work experience in two or more of the eight domains of the CISSP CBK. Earning a four-year college degree or regional equivalent or an additional credential from the (ISC)² approved list will satisfy one year of the required experience. Education credit will only satisfy one year of experience.
A candidate who doesn’t have the required experience to become a CISSP may become an Associate of (ISC)² by successfully passing the CISSP examination. The Associate of (ISC)² will then have six years to earn the five years required experience.
Work Experience:
Your work experience must fall within two or more of the eight domains of the (ISC)² CISSP CBK:
Domain 1. Security and Risk Management
Domain 2. Asset Security
Domain 3. Security Architecture and Engineering
Domain 4. Communication and Network Security
Domain 5. Identity and Access Management (IAM)
Domain 6. Security Assessment and Testing
Domain 7. Security Operations
Domain 8. Software Development Security
Full-Time Experience: Your work experience is accrued monthly. Thus, you must have worked a minimum of 35 hours/week for four weeks in order to accrue one month of work experience.
Part-Time Experience: Your part-time experience cannot be less than 20 hours a week and no more than 34 hours a week.
1040 hours of part-time = 6 months of full time experience
2080 hours of part-time = 12 months of full time experience
Internship: Paid or unpaid internship is acceptable. You will need documentation on company/organization letterhead confirming your position as an intern. If you are interning at a school, the document can be on the registrar’s stationery.
Hardware & Software
This course will be conducted as a Virtual Live Class (VLC) via Zoom platform. Participants must own a zoom account and have a laptop or a desktop with “Zoom Client for Meetings” installed. This can be downloaded from https://zoom.us/download.
|
System Requirement |
|
Must Have: Please ensure that your computer or laptop meets the following requirements.
Good to Have:
Not Recommended: |
Course Outline
- Chapter 1 (Information Security Environment)
- Understand, adhere to and Promote Professional Ethics
- Understand and Apply Security Concepts
- Evaluate and Apply Security Concepts
- Legal Environment
- Basic Secure Design Principles
- Chapter 2 (Information Asset Security)
- Information Assets
- Manage the data security life cycle
- Determine Data security controls and compliance requirements
- Chapter 3 (Identity and Access Management)
- Manage the Identity and Access Provisioning Lifecycle
- Implement and Manage Access Control Models and Mechanisms
- Managing People and Operations
- Control Physical and Logical Access to Assets
- Manage Identification and Authentication of People, Devices and Services
- Implement Authentication and Authorization Systems
- Chapter 4 (Security Architecture and Engineering)
- Assess and mitigate the vulnerabilities of Security Architectures, Design and Solution Elements
- Cryptographic Systems
- Hybrid Systems and the Public Key Infrastructure (PKI)
- Cryptographic Systems Hygiene: Operation and Maintenance
- Cryptanalysis – Methods of Cryptanalytic Attacks
- Chapter 5 (Communication and Network Security)
- Open Systems Interconnection (OSI) and Transmission Control Protocol (TCP) over Internet Protocol (TCP/IP) models
- OSI Layer 1 (Physical Layer)
- OSI Layer 2 (Data Link Layer)
- OSI Layer 3 (Network Layer)
- OSI Layer 4 (Transport Layer)
- OSI Layer 5 (Session Layer)
- OSI Layer 6 (Presentation Layer)
- OSI Layer 7 (Application Layer)
- Secure Design Principles in Network Architecture
- Secure Network Components
- Implementing Secure Communications Channels According to Design
- Chapter 6 (Software Development Security)
- Why so many software systems are Unsecure
- Security Weaknesses at the source code level: Why so much software is unsecure
- Why Databases can be unsecure
- Why websites can be unsecure
- Malware, ransomware, and Ransom Attacks: The software perspective
- “Baking in “ Security: Development Management Choices
- Security Controls in Software Development Ecosystems
- Risk Analysis and Mitigation for Software Apps and Systems
- Chapter 7 (Security Assessment and Testing)
- Design and validate Assessment, Test and Audit Strategies
- Conduct Security Control Assessment
- Collect Security Process Data
- Analyze and report on Organization Performance
- Chapter 8 (Security Operations)
- Conduct Logging and Monitoring Activities
- Perform Change Management
- Basic Incident Response Concepts
- Conduct Incident Management
- Operate and maintain Detective and Preventative Measures
- Implement Backup and Recovery Strategies
- Apply Security Design Principles to Site and Facility Design
- Site and Facility Security Controls
- Personnel Safety and Security Controls
Certificate Obtained and Conferred by
- Certificate of Completion from NTUC LearningHub
Upon meeting at least 75% attendance and passing the assessment(s), participants will receive a Certificate of Completion from NTUC LearningHub.
- Statement of Attainment (SOA) from SkillsFuture Singapore
Upon meeting at least 75% attendance and passing the assessment(s), participants will receive a SOA from SkillsFuture Singapore to certify that the participant has achieved the following Competency Standard(s):
-
- ICT-SNA-4020-1.1 Security Governance
- External Certification
After completing this course, participants can optionally purchase the official “Certified Information Systems Security Professional (CISSP)” certification exam and upon passing, participants will receive the official certification from International Information Systems Security Certification Consortium ((ISC)2).The certification is governed and maintained by (ISC)2.
Additional Details
Medium of Instruction: English
Trainer: Trainee ratio is 1:25
Mode of Delivery: Virtual Live Class (VLC) via Zoom or Face to Face (F2F)
As this is a government subsidised programme, the entire training programme will be video recorded for audit purposes by the relevant funding agency. To ascertain their presence, Trainees / Participants are required to
- Turn on web camera to show real-time video, as opposed to using a profile picture / video for the entirety of the training and assessment session.
- Ensure that their faces are fully visible (not just the forehead / eyebrows)
- Use their full name as per NRIC / Passport as their Screen Name on Zoom
Courseware: Official ISC2 Digital Student Kit
Price:
|
Course Fee and Government Subsidies |
||||||
|
|
Individual Sponsored |
Company Sponsored |
||||
|
|
Non-SME |
SME |
||||
|
Before GST |
With GST |
Before GST |
With GST |
Before GST |
With GST |
|
|
Full Course Fee
|
$4,050.00 |
$4,414.50 |
$4,050.00 |
$4,414.50 |
$4,050.00 |
$4,414.50 |
|
For Singapore Citizens aged 39 years and below
|
$1,215.00 |
$1,324.35 |
$1,215.00 |
$1,324.35 |
$405.00 |
$514.35 |
|
For Singapore Citizens aged 40 years and above |
$405.00 |
$514.35 |
$405.00 |
$514.35 |
$405.00 |
$514.35 |
Remarks:
|
Individual Sponsored Trainee |
Company Sponsored Trainee |
|
SkillsFuture Credit:
UTAP:
PSEA:
|
Absentee Payroll (AP) Funding:
|
Terms & Conditions apply. NTUC LearningHub reserve the right to make changes or improvements to any of the products described in this document without prior notice.
Prices are subject to other LHUB miscellaneous fees.
| Batch ID | Course Period | Course Title | Funding Available |
Duration (Hours) |
Session (Hours) |
Venue | Available Seats |
Online Payment |
|---|
What Others Also Enrolled In
(ISC)2 CERTIFIED INFORMATION SYSTEMS SECURITY PROFESSIONAL (CISSP) (SF) (SYNCHRONOUS E-LEARNING)
View detail
(ISC)2 CERTIFIED CLOUD SECURITY PROFESSIONAL (CCSP) (SF)
View detail
NICF – (ISC)2 CERTIFIED INFORMATION SYSTEMS SECURITY PROFESSIONAL (CISSP) (SF)
View detail