The Official CISSP CBK Review Seminar (Accredited Training by ISC2) (CISSP Certification)

Date : 18-22 October 2010  
Venue : ACIS Training Room

Course Introduction

The (ISC)2® CISSP® CBK® Review Seminar is the most comprehensive review seminar discussing information systems security industry best practices, known as the (ISC)2 CBK®.

The review seminar helps you review the 10 domains of the information security practice. It also serves as a strong learning tool for mastering concepts and topics related to all aspects of information systems security.

To attend the CISSP CBK Review Seminar the attendee does not need to have the pre-requisite experience for the examination. It is encouraged that all people working in the field of IT and Information Security attend the CISSP seminar to give them a thorough understanding of Information Security even if they do not intend to sit for the examination.

Course Objectives

• To offers a high-level review of the main topics of CISSP CBK (Common Body of Knowledge).
• To identify areas students or CISSP candidates need to study.
• To provide an overview of the scope of the information security field.
• To study for CISSP examination
   

Course Prerequisite

• None

Target Group

• MThe CISSP® credential and the CISSP CBK Review Seminar are ideal for those working toward or who have already attained positions as Senior Network Security Engineers, CIO, CISO, CSO, Information Security Manager/Director, Information Security Consultant, Information Security Professional and Information Systems Auditors.

Learning Level

Course Duration

Course Outline

Module 1: Access Control

• A collection of mechanisms that work together to create a security architecture to protect the assets of the information system.

Module 2: Application Security

• Addresses the important security concepts that apply to application software development. It outlines the environment where software is designed and developed and explains the critical role software plays in providing information system security.

Module 3: Business Continuity and Disaster Recovery Planning

• For the preservation and recovery of business operations in the event of outages.

Module 4: Cryptography

• The principles, means, and methods of disguising information to ensure its integrity, confidentiality and authenticity.

Module 5: Information Security and Risk Management

• The identification of an organization’s Information assets and the development, documentation, and implementation of policies, standards, procedures, and guidelines. Management tools such as data classification and risk assessment/analysis are used to identify threats, classify assets, and to rate system vulnerabilities so that effective controls can be implemented.

Module 6: Legal, Regulations, Compliance and Investigation

• Computer crime laws and regulations
• The measures and technologies used to investigate computer crime incidents

Module 7: Operations Security

• Used to identify the controls over hardware, media, and the operators and administrators with access privileges to any of these resources. Audit and monitoring are the mechanisms, tools, and facilities that permit the identification of security events and subsequent actions to identify the key elements and report the pertinent information to the appropriate individual, group, or process.

Module 8: Physical (Environmental) Security

• Provides protection techniques for the entire facility, from the outside perimeter to the inside office space, including all of the information system resources.

Module 9: Security Architecture and Design 

• Contains the concepts, principles, structures, and standards used to design, monitor, and secure operating systems, equipment, networks, applications and those controls used to enforce various levels of availability, integrity, and confidentiality.

Module 10: Telecommunications and Network Security

• Network structures
• Transmission methods
• Transport formats
• Security measures used to provide availability, integrity, and confidentiality
• Authentication for transmissions over private and public communications

Instructor

Technical & Instructor Advisor by:
A.Prinya Hom-anek
CGEIT, CISSP, SSCP, CISA, CISM, SANS GIAC GCFW, CompTIA Security+, ITIL Foundation,
(ISC)2 Asian Advisory Board Member, ISACA Bangkok Chapter Board Member
President & Founder, ACIS Professional Center

Time and Venue

Registration Method

Tuition Fee

Price Include
:: Computer 1 set/person
:: CD-ROM 1 disk (If prepared)
:: Class Material 1 set/person
:: Lunch / Morning & Afternoon Coffee Break

Payment Method

ธนาคาร กรุงไทย สาขา ถนนศรีอยุธยา
เลขที่บัญชีกระแสรายวัน: 013-6-08953-4
หรือ
ธนาคารกสิกรไทย สาขา ถนนหลังสวน
เลขที่บัญชีกระแสรายวัน: 082-1-07933-0
หรือ
ธนาคารกรุงเทพ สาขา สยามสแควร์
เลขที่บัญชีกระแสรายวัน: 152-3-11184-5

Registration and Information

For more information please contact:

• Ms.Athitiya Weerayasobprasong
  E-mail: athitiya.wacisonline.net
  Tel: 02) 650-5771  ext 151
  Fax: 02) 650-5776