C)ISSO: Information Systems Security Officer

Modules:

• Module 1 -Risk Management
• Module 2 -Security Management
• Module 3 -Identification and Authentication
• Module 4 -Access Control
• Module 5 -Security Models and Evaluation Criteria
• Module 6 -Operations Security
• Module 7 -Vulnerability Assessments
• Module 8 -Symmetric Cryptography and Hashing
• Module 9 -Network Connections
• Module 10 -Network Protocols and Devices
• Module 11 -Telephony, VPNs, and Wireless
• Module 12 through 19 – See Detailed Outline Below

Detailed Outline:

Course Introduction

• Module 1 – Risk Management
  1. Risk Definitions
  2. Risk Management
  3. Risk Assessment
  4. Responding to Risk
• Module 2 – Security Management
  1. Understanding Security
  2. Information Security Management System
  3. Roles and Responsibility
  4. Security Frameworks
  5. Human Resources
• Module 3 – Identification and Authentication
  1. Identity Management
  2. Authentication Techniques
  3. Single Sign-on
  4. Access Control Monitoring
• Module 4 – Access Control
  1. Access Control Types and Characteristics
  2. Information Classification
  3. Access Control Models and Techniques
  4. Access Control Methods
• Module 5 – Security Models and Evaluation Criteria
  1. Trusted Computing Base
  2. Protection Mechanisms
  3. Security Models
  4. Evaluation Criteria
• Module 6 – Operations Security
  1. Administrative Management Responsibilities
  2. Product Implementation Management
  3. Redundancy and Fault Tolerance
  4. Operational Issues and Responses
  5. Threats to Operations
• Module 7 – Symmetric Cryptography and Hashing
  1. Cryptography Terms
  2. Historical Uses of Cryptography
  3. Cryptography Foundations
  4. Modern Cryptography
  5. Hashing

• Module 8 – Asymmetric Cryptography and PKI
  1. Asymmetric Cryptography
  2. Hybrid Crypto and Digital Signatures
  3. Public Key Infrastructure
  4. Cryptography in Use
  5. Attacks on Cryptography
• Module 9 – Network Connections
  1. Network and Communications Security
  2. Topologies
  3. Cabling
  4. LAN and WAN
• Module 10 – Network Protocols and Devices
  1. OSI Model
  2. Network Devices
  3. Network Security Sentries
  4. Ports, Protocols and Services
• Module 11 – Telephony, VPNs and Wireless
  1. Telephony
  2. VPNs
  3. Wireless
  4. Network Based Attacks
• Module 12 – Security Architecture and Attacks
  1. Security Architecture
  2. Architectural Models
  3. System Threats
• Module 13 – Software Development Security
  1. Software Security Concerns
  2. Software Lifecycle Development Processes
  3. Web Application Security
  4. PCI-DSS Compliance
• Module 14 – Database Security
  1. Database Models &Terminology
  2. Database Security Issues
  3. Artificial Intelligence
• Module 15 – Malware and Attacks
• Module 16 – Business Continuity
  1. Project Initiation
  2. Business Impact Analysis
  3. Determining Recovery Strategies
  4. Writing the Plan
  5. Preparing for a Disaster
  6. Introduction to Business Continuity Management
• Module 17 – Incident Management, Law and Ethics
  1. Incident Management
  2. Law
  3. Computer Crime

1. Evidence Handling
2. Privacy Legislations
3. Ethics

• Module 18 – Physical Security
  1. Facility Location and Construction
  2. Risks, Threats and Countermeasures
  3. Perimeter Protection
  4. Electrical Power Issues
  5. Fire Prevention, Detection and Suppression.