ISC2 Information Systems Security Engineering Professional (ISSEP) Cert Prep

Course details

Are you preparing for the Information Systems Security Engineering Professional (ISSEP) certification exam? This course was designed for you. With expert instruction from industry-leading cybersecurity professional development platform Cybrary, discover the core skills and technical know-how required to tackle the five domains of the official exam. By the end of this course, you’ll be equipped with cutting-edge security engineering skills for developing, designing, and analyzing security solutions and providing risk-based guidance to meet organizational goals.

Learning objectives
Apply the information system security engineering processes as the information system security engineer on the systems engineering team.
Analyze system security risk throughout the system development lifecycle within the context of system operations and organizational risk tolerance.
Analyze, design, develop, and evaluate the security design and architecture for systems using security engineering processes and principles.
Develop system solutions that employ security functions and provide adequate protection to system functions.
Choose the most effective security configurations and designs to ensure system security during operations, change management, and disposal.

Concepts

0. Introduction

01 - Course overview
02 - CISSP concentrations
03 - CISSP domains review
04 - ISSEP domains
05 - Information systems security engineer roles
06 - Module summary

Module 1 - Systems Security Engineering Foundations

07 - Objectives and introduction to systems security engineering
08 - Fundamentals
09 - Processes
10 - Development methodologies
11 - Technical management
12 - Acquisition process
13 - Trusted systems and networks
14 - Module summary

Domain 2 - Risk Management

15 - Objectives and review of risk management
16 - Enterprise risk management
17 - Risk context, analysis, and evaluation
18 - Risk findings and decisions
19 - Stakeholder risk tolerance
20 - Risk remediation and system changes
21 - Risk treatment options
22 - Module summary

Domain 3 - Security Planning and Design

23 - Objectives and security planning and design overview
24 - Stakeholder requirements
25 - Threats and resilience
26 - System security principles
27 - Context, CONOPS, and requirements documents
28 - Functional analysis
29 - Requirements traceability
30 - Trade-off studies
31 - Module summary

Domain 4 - Systems Implementation, Verification, and Validation

32 - Objectives and technical processes
33 - Implementation
34 - Verification
35 - Validation
36 - Stakeholder communications
37 - Module summary

Domain 5 - Secure Operations, Change Management, and Disposal

38 - Objectives and introduction to operations
39 - Secure operations
40 - Continuous monitoring
41 - Secure maintenance & supply chain
42 - Incident response
43 - Change management
44 - Disposal strategies
45 - Decommissioning and disposal processes
46 - Module summary

Module 7 - Information Systems Security Engineering (ISSE) Process

47 - Objectives and generic systems engineering (SE)
48 - Comparing SE and ISSE activities
49 - Discover information protection needs (discover needs)
50 - Define system security requirements (define system requirements)
51 - Define system security architecture (define system architecture)
52 - Develop detailed security design (develop detailed design)
53 - Implement system security (implement system)
54 - Assess information protection effectiveness (assess effectiveness)
55 - Module summary

Module 8 - System Development Life Cycle (SDLC)

56 - Objectives and types of system development
57 - Introduction to the SDLC
58 - Initiation
59 - Acquisition development
60 - Implementation and assessment
61 - Assessment - DITSCAP DIACAP RMF
62 - Operations and maintenance
63 - Disposal
64 - Module summary

Module 9 - Key NIST Standards

65 - Objectives and introducing NIST and standards
66 - NIST SP 800-160 - Systems security engineering
67 - NIST SP 800-53 - Security and privacy controls for federal information systems and organizations
68 - NIST SP 800-88 - Guidelines for media sanitization
69 - NIST SP 800-100 - Information security handbook - A guide for managers
70 - NIST cybersecurity framework
71 - FIPS PUB 140-2 - Security requirements for cryptographic modules
72 - Module summary

Module 10 - Concentration Insights

73 - Objectives and review of ISSEP domains
74 - Documents that an ISSE should know
75 - Systems security engineering capability maturity model
76 - ISSE and SDLC linkages
77 - Preparing for the ISSEP exam
78 - Module summary