(ISC)² CISSP – Certified Information Systems Security Professional

Security leadership often needs a common operating model for governance, risk, compliance, and technical security decisions across teams. This CISSP course is a fit for IT Directors, Training Managers, and Team Leads supporting experienced security practitioners, IT managers, architects, and engineers who need management-level security breadth and certification readiness.

The course covers approximately 21 hours, 40 minutes of training, making it practical for a multi-week enablement plan rather than a one-time workshop. Topics move from ethics, governance, compliance, investigations, policy, BCP/DR, and risk management into asset security, secure design, cryptography, networking, IAM, testing, auditing, infrastructure protection, physical security, and secure software development. For change management, teams should plan time for discussion around existing policies, audit requirements, incident processes, and security ownership.

CBT Nuggets supports rollout through Playlists for assignment structure, Practice Exams for certification preparation, and Team Reporting to track progress and completion.

IT teams complete this CISSP training to connect security strategy with day-to-day operational decisions. The course emphasizes scenarios where security leaders must balance governance, technical controls, investigations, and business continuity.

• Improve audit and compliance readiness by aligning governance, policy development, data retention, investigations, and evidence handling with security program expectations.
• Reduce outage and recovery risk by strengthening team understanding of business continuity, disaster recovery, physical security, safety, and resource protection.
• Make stronger architecture decisions by applying secure design principles, cryptographic concepts, network security, wireless security, SDN, VPCs, and secure communications.
• Standardize access and testing practices by reinforcing identity strategy, authentication, authorization, security assessments, auditing, and application security review.

Knowledge

• Security ethics, governance responsibilities, and compliance concepts relevant to CISSP-aligned roles
• Risk management, security controls, threat modeling, and security awareness concepts
• Asset security, data handling, retention, auditing, and investigation considerations
• Secure design principles, cryptographic solutions, network protocols, and secure communications
• Identity, authentication, authorization, infrastructure security, BC/DR, and physical security concepts
• Secure software development and application security assessment practices

Ability

• Evaluate security policies, controls, and governance practices against organizational risk needs
• Support incident investigations, evidence handling, auditing, and compliance-driven processes
• Contribute to business continuity and disaster recovery planning discussions
• Assess network, wireless, cloud-networking, and communication security decisions at a program level
• Apply IAM concepts to authentication, authorization, and identity management strategy
• Prepare more effectively for the ISC2 CISSP certification exam