Course Description
Mile2's Certified Information Systems Security Officer - C)ISSO prepares and certifies individuals to analyze an organization's information security infrastructure in respects to threats and risks. This course helps you design a security program to mitigate risks relevant to 2011. Chapter 1 of this 10 chapter course focuses on Security Management Practices.
In mile2's certification process, Information Systems Security Officers will also be proficient in risk analysis, risk mitigation, application security, network security, operations security, business continuity and disaster recovery planning.
Mile2 has observed that many respected organizations and instructors approach the delivery of both the CISSP® and Information Systems Security Officer prep events as an information technology security event. The focus therefore is inevitably on the technology used in the processing of data into information. This is relatively incomplete, as technology is only one of the many components of an information system. Mile2's certified Information Systems Security Officer training balances both theory and technology.
Prerequisites
Experience in at least 2 modules below is beneficial but not required:
• Security Management Practices
• Access Control
• Cryptography
• Physical Security
• Security Architecture and Models
• aw, Investigation and Ethics
• Telecommunications and Network
• Business Continuity Objectives
• Application and System Development
• Operations Security
Outline
Chapter 01: Security Management Practices
• Module 01: Overview
• Module 02: Security Definitions
• Module 03: Control Types
• Module 04: AIC Triad
• Module 05: Countermeasure Visibility
• Module 06: Building Foundation - Security Programs
• Module 07: Enterprise Security - Business Requirements
• Module 08: Security Roadmap
• Module 09: Policy Types
• Module 10: Security Roles
• Module 11: Legal Issues
• Module 12: Way to Determine Liability
• Module 13: Why is Risk Management difficult?
• Module 14: What is the value of an asset?
• Module 15: Different Approaches to Analysis
• Module 16: Ale Example
• Module 17: Comparing Cost and Benefit
• Module 18: Cost of a Countermeasure
• Module 19: Liability of Actions
• Module 20: Employee Management
• Module 21: Part 2: Security Practices Management “Class”
• Module 22: Security Definitions
• Module 23: Control Types
• Module 24: “Soft” Controls
• Module 25: Logical Controls
• Module 26: Physical Controls
• Module 27: CIA Triad
• Module 28: Countermeasure Visibility
• Module 29: Security Program
• Module 30: Enterprise Security
• Module 31: Enterprise Security – Program “Components”
• Module 32: What does the Security Architecture need to do for you?
• Module 33: Security Architecture
• Module 34: Security Roadmap
• Module 35: Security Requires Communication
• Module 36: Approach to Security Management
• Module 37: Policy Types
• Module 38: Industry Best Practice Standards
• Module 39: Security Roles
• Module 40: What Is the Value of an Asset?
• Module 41: Risk Management
• Module 42: Qualitative Analysis Steps
• Module 43: Quantitative Analysis
• Module 44: ALE Values Uses
• Module 45: ALE Calculation
• Module 46: Comparing Cost and Benefit
• Module 47: Can You Get Rid of All Risk?
• Module 48: Management’s Response to Identified Risks
• Module 49: Employee Management
• Module 50: Hiring and Firing Issues
• Module 51: Practice Questions
• Module 52: Part 3: Exam Practice Questions
• Module 53: Answers
Certification
The Information Systems Security Officer (C)ISSO) certification is recognized by the Canada Department of National Defense and the US Department of Defense along with other institutions. The exam covers the CISSP objectives and certification is given through Mile2.