CISSP: Certified Information Systems Security Professional

The Official ISC2® Certified Information Systems Security Professional (CISSP®) training provides a comprehensive review of the knowledge required to effectively design, engineer and manage the overall security posture of an organisation. This training course will help students review and refresh their knowledge and identify areas they need to study for the CISSP exam. Content aligns with and comprehensively covers the eight domains of the ISC2® CISSP Common Body of Knowledge (CBK®), ensuring relevancy across all disciplines in the field of cybersecurity.

«Extraordinarily good teacher; incredible technical skills and great humour. What was particularly good with the course was the combination of teaching the CBK, the teacher showing real-life examples, and the teacher's great way of questioning us students. » Course delegate

As an ISC2® Official Training Provider, we use courseware developed by ISC2® –creator of the CISSP CBK– to ensure your training is relevant and up-to-date. Our instructors are verified security experts who hold the CISSP and have completed intensive training to teach ISC2® content.

This course content is updated and aligned with the CISSP exam that was refreshed on 15 April 2024.

Key takeaways

After completing this course you should be able to:

  • Understand and apply fundamental concepts and methods related to the fields of information technology and security
  • Align overall organizational operational goals with security functions and implementations.
  • Understand how to protect assets of the organization as they go through their lifecycle.
  • Understand the concepts, principles, structures and standards used to design, implement, monitor and secure operating systems, equipment, networks, applications and those controls used to enforce various levels of confidentiality, integrity and availability.
  • Implement system security through the application of security design principles and application of appropriate security control mitigations for vulnerabilities present in common information system types and architectures.
  • Understand the importance of cryptography and the security services it can provide in today’s digital and information age.
  • Understand the impact of physical security elements on information system security and apply secure design principles to evaluate or recommend appropriate physical security protections.
  • Understand the elements that comprise communication and network security coupled with a thorough description of how the communication and network systems function.
  • List the concepts and architecture that define the associated technology and implementation systems and protocols at Open Systems Interconnection (OSI) model layers 1-7.
  • Identify standard terms for applying physical and logical access controls to environments related to their security practice.
  • Appraise various access control models to meet business security requirements.
  • Name primary methods for designing and validating test and audit strategies that support business requirements.
  • Enhance and optimize an organization’s operational function and capacity by applying and utilizing appropriate security controls and countermeasures.
  • Recognize risks to an organization’s operational endeavours and assess specific threats, vulnerabilities and controls.
  • Understand the System Lifecycle (SLC) and the Software Development Lifecycle (SDLC) and how to apply security to it; identify which security control(s) are appropriate for the development environment; and assess the effectiveness of software security.

Target audience

This training course is intended for professionals who have at least five years of cumulative, paid work experience in two or more of the eight domains of the ISC2® CISSP CBK and are pursuing CISSP training and certification to acquire the credibility and mobility to advance within their current information security careers.

Individuals may be currently in roles such as:
Security Consultant, Security Manager, IT Director/Manager, Security Auditor, Security Architect, Security Analyst, Security Systems Engineer, Chief Information Security Officer, Security Director, Network Architect.

 




Domain 1: Security and Risk Management
Domain 2: Asset Security
Domain 3: Security Architecture and Engineering
Domain 4: Communication and Network Security
Domain 5: Identity and Access Management (IAM)
Domain 6: Security Assessment and Testing
Domain 7: Security Operations
Domain 8: Software Development Security



This course is recommended as preparation for the following exam:
ISC2 Certified Information Systems Security Professional

IMPORTANT! 
The CISSP exam is not included in the CISSP training, but you may book and take the exam at Glasspaper`s test center in Oslo. The cost for the CISSP exam is EUR 665 + mva.
If you book the test directly with Glasspaper, we will add an administration fee of NOK 750.

About the CISSP certification process

Gaining this accreditation is not just about passing the exam, there are a number of other criteria that need to be met including 5 years of cumulative, paid work experience in two or more of the eight domains of the ISC2® CISSP CBK.

CISSP certification process:

Full details can be found at CISSP certification 

Those without the required experience can take the exam to become an Associate of ISC2 while working towards the experience needed for full certification.

Exam format and maintenance

The CISSP exam is delivered as a Computer Adaptive Test (CAT) in English, with a duration of up to 3 hours and 100–150 questions.

To maintain your CISSP certification, you must earn and submit 120 Continuing Professional Education (CPE) credits every three years, as well as pay an annual maintenance fee to ISC2.

Accreditation

CISSP is ANAB-accredited to ISO/IEC 17024 (ISC2).

  • Hvem passer dette kurset for?
    Kurset passer for erfarne sikkerhetsprofesjonelle som ønsker å oppnå eller forberede seg på CISSP-sertifiseringen. Det kreves minst fem års betalt arbeidserfaring innen to eller flere av de åtte CISSP-domeneområdene. Typiske roller er Security Consultant, Security Manager, IT Director/Manager, Security Auditor, Security Architect, Security Analyst, Security Systems Engineer, CISO, Security Director og Network Architect.

  • Hvilke forkunnskaper bør jeg ha?
    Du bør ha minimum fem års relevant erfaring fra to eller flere av CISSP-domeneområdene. Har du ikke den nødvendige erfaringen, kan du likevel ta eksamen og oppnå tittelen Associate of ISC2 mens du bygger erfaringen som kreves for full sertifisering.

  • Hva lærer jeg i kurset?
    Du vil få en grundig gjennomgang av alle de åtte domeneområdene i CISSP CBK®, inkludert:

    • Security and Risk Management

    • Asset Security

    • Security Architecture and Engineering

    • Communication and Network Security

    • Identity and Access Management (IAM)

    • Security Assessment and Testing

    • Security Operations

    • Software Development Security

    Etter kurset skal du kunne designe, implementere og forvalte sikkerhetsstrategier, anvende sikkerhetsprinsipper på systemer og applikasjoner, forstå kryptografi, vurdere sikkerhetsrisikoer og bruke rammeverk for sikker utvikling og drift.

  • Hvordan foregår kurset?
    Kurset varer 5 dager.

    • Dag 1: 10:00 – 16:00

    • Dag 2–5: 09:00 – 16:00
      Undervisningen foregår med engelskspråklig instruktør, og alt materiell er på engelsk.

  • Hva er inkludert i prisen?
    Kursavgiften er 39.500 NOK og inkluderer:

    • Offisiell ISC2® CISSP Guide

    • Self-Practice Exam

    • Lunsj og forfriskninger (for klasseromsundervisning)

  • Gir kurset sertifisering?
    Kurset i seg selv gir ikke sertifisering, men er anbefalt forberedelse til CISSP-eksamen.

    • Eksamen må bestilles og tas separat.

    • Pris: EUR 665 + mva (administrasjonsgebyr på 750 NOK ved bestilling gjennom Glasspaper).

  • Hvordan fungerer sertifiseringsprosessen?
    For å bli CISSP-sertifisert må du:

    • Bestå CISSP-eksamen

    • Ha fem års relevant arbeidserfaring (eller bli Associate of ISC2)

    • Få godkjent endorsement fra en eksisterende ISC2-medlem

    • Forplikte deg til ISC2 Code of Ethics

    • Betale vedlikeholdsavgift

  • Hvordan foregår eksamen og hvordan vedlikeholdes sertifiseringen?
    CISSP-eksamen gjennomføres som Computer Adaptive Test (CAT) på engelsk, med varighet på inntil 3 timer og 100–150 spørsmål.

    For å opprettholde sertifiseringen må du oppnå og rapportere 120 CPE-poeng (Continuing Professional Education) i løpet av tre år, samt betale en årlig vedlikeholdsavgift til ISC2.

  • Er CISSP-sertifiseringen akkreditert?
    Ja. CISSP fra ISC2 er ANAB-akkreditert iht. ISO/IEC 17024.

  • Kan jeg få kurset spesialtilpasset?
    Ja – kurset kan spesialtilpasses for organisasjoner, for eksempel med fokus på bestemte domener eller bruk av relevante caser.

  • Kan jeg bestille kurset for min organisasjon?
    Ja – Glasspaper tilbyr kurset bedriftsinternt, både fysisk og digitalt, slik at teamet ditt kan gjennomføre opplæringen samlet.

  • Hva er neste steg etter kurset?
    Etter kurset melder de fleste seg opp til CISSP-eksamenen. For de som ønsker å bygge videre på spesialiseringer kan kurs innenfor CCSP (Cloud Security) eller CISM/CISA være relevante videre steg.


Hva er neste steg etter dette kurset?

Ønsker du å bygge videre etter CISSP? Hos Glasspaper finner du en rekke avanserte sikkerhets- og sky-sertifiseringer som kompletterer kompetansen din.
Utforsk blant annet: 

Se flere kurs innen: IT Sikkerhet og Sky-tjenester

Other relevant courses

CCSP: Certified Cloud Security Professional
17. November
5 days
Classroom Virtual
AWS Security Essentials
17. February
1 days
Classroom Virtual
Security Engineering on AWS
18. February
3 days
Classroom Virtual
AWS Security Essentials
17. February
1 days
Classroom Virtual