SEC870 - Information Systems Security Management Professional (ISSMP or CISSP-ISSMP) Bootcamp

Course Description

Bootcamp | 30 hours | 3 CEUs | $3,695

This course provides a comprehensive review of security topics and exam preparation for the Information Systems Security Management Professional (ISSMP) certification. ISSMP is a specialty of the CISSP which extends upon the CISSP Common Body of knowledge. It is designed to address security issues from a larger model of security and management, focusing on elements such as project management, risk management, setting up and delivering security awareness programs, and managing Business Continuity Planning programs. In this training students concentrate on the five domains of the Information Systems Security Management Professional (ISSMP) CBK:

• Enterprise Security Management Practices
• Enterprise-Wide System Development Security
• Law, Investigations, Forensics and Ethics
• Overseeing Compliance of Operations Security
• Understanding Business Continuity Planning (BCP), Disaster Recovery Planning (DRP) and Continuity of Operations Planning (COOP) 

Other topics include the application and testing process as well as key test topics and practice questions.

Course Outline

• Domain 1: Security Leadership and Management
  • Understand Security's Role in the Organization's Culture, Vision, and Mission
  • Align Security Program with Organizational Governance
  • Define and Implement Information Security Strategies
  • Manage Data Classification
  • Define and Maintain Security Policy Framework
  • Manage Security Requirements in Contracts and Agreements
  • Develop and Maintain a Risk Management Program
  • Manage Security Aspects of Change Control
  • Oversee Security Awareness and Training Programs
  • Define, Measure, and Report Security Metrics
  • Prepare, Obtain, and Administer Security Budget
  • Manage the Security Organization
  • Understand Project Management Principles
  • Training Camp Domain Review Discussions
• Domain 2: Security Lifecycle Management
  • Manage the Integration of Security into the SDLC
  • Integrate New Business Initiatives into the Security Architecture
  • Define and Oversee Comprehensive Vulnerability Management Programs
  • Training Camp Domain Review Discussions
• Domain 3: Security Compliance Management
  • Validate Compliance with Organizational Security Policies and Procedures
  • Manage and Document Exceptions to the Compliance Framework
  • Coordinate with Auditors and Assist with the Internal and External Audit Process
  • Training Camp Domain Review Discussions
• Domain 4: Contingency Management
  • Oversee Development of Contingency Plans
  • Guide Development of Recovery Strategies
  • Manage Maintenance of the BCP and DRP plans
  • Training Camp Domain Review Discussions
• Domain 5: Law, Ethics, and Incident Management
  • Understand the Impact of Laws that Relate to Information Security
  • Develop and Manage the Incident Handling and Investigation Processes
  • Understand Management Issues as They Relate to the (ISC)2 Code of Ethic
  • Training Camp Domain Review Discussions

Additional Information

Duration

Testimonials

"A great class and a great instructor, he was very knowledgeable." - Boeing

Applies Towards the Following Certificates

• Cybersecurity Management Certificate : Required