ISSAP Training & Certification in Rua António Heitor

CISSP-ISSAP Training Course Outline

Domain 1: Governance, Risk, and Compliance (GRC)

Module 1: Identify Legal, Regulatory, Organisational, and Industry Requirements

• Applicable Information Security Standards and Guidelines
• Third-Party and Contractual Obligations
• Applicable Sensitive and Personal Data Standards and Privacy Regulations
• Resilient Solutions

Module 2: Architecting for Governance, Risk, and Compliance

• Identify Key Assets, Business Objectives, and Stakeholders
• Design Monitoring and Reporting
• Design for Auditability
• Incorporate Risk Assessment Artifacts
• Advise Risk Treatment

Domain 2: Security Architecture Modelling

Module 1: Identify Security Architecture Approach

• Scope and Types of Security Architecture
• Frameworks and Reference Architectures
• Threat Modelling Frameworks
• Common Vulnerability Scoring Systems

Module 2: Verify and Validate Design

• Results of Threat Modelling
• Gaps
• Alternative Solutions/Mitigations/Compensating Controls
• Internal or External Third-Party
• Code Review Methodology

Domain 3: Infrastructure and System Security Architecture

Module 1: Identify Infrastructure and System Security Requirements

• Deployment Models
• Information Technology and Operational Technology
• Physical Security
• Infrastructure and System Monitoring
• Infrastructure and System Cryptography
• Application Security

Module 2: Architect Infrastructure and System Security

• Physical Security Control Set
• Platform Security
• Network Security
• Storage Security 
• Data Repository Security
• Cloud Security
• Operational Technology 
• Endpoint Security
• Secure Shared Services 
• Third-Party Integrations
• Infrastructure Monitoring 
• Content Monitoring
• Out-of-Band Communications
• Evaluation of Security Controls for System Components

Module 3: Architect Infrastructure and System Cryptographic Solutions

• Determine Cryptographic Design Considerations and Constraints
• Determine Cryptographic Implementation in Various States
• Plan Key Management Lifecycle

Domain 4: Identity and Access Management (IAM) Architecture

Module 1: Architect Identity Lifecycle

• Establish and Verify Identity
• Assign Identifiers to Users and Systems
• Identity Provisioning and De-Provisioning
• Identity Management Technologies

Module 2: Architect Identity Authentication

• Define Authentication Approach
• Authentication Protocols and Technologies
• Authentication Control Mechanisms
• Define Trust Relationships

Module 3: Architect Identity Authorisation

• Authorisation Concepts and Principles
• Authorisation Models
• Authorisation Processes and Workflows
• Roles, Rights, and Responsibilities Related to System, Application, and Data Access Control
• Management of Privileged Accounts and Access Rights
• Authorisation Approaches

Module 4: Architect Identity Accounting

• Determine Accounting, Analysis, and Forensic Requirements
• Define Audit Events 
• Establish Audit Log Alerts and Notifications
• Log Management 
• Log Analysis and Reporting
• Compliance with Policies and Regulations

Who Should Attend this CISSP-ISSAP Training?

The CISSP-ISSAP is an advanced credential for those who have already completed the CISSP Course. This course can be beneficial for a wide range of professionals, including:

• Chief Security Architects
• Security System Engineers
• Chief Security Analysts
• Security Consultants
• IT Managers & Directors
• Security Planners
• Network Architects

Prerequisites of the CISSP-ISSAP Training

There are no formal prerequisites for CISSP-ISSAP Training. However, delegates with at least two years of work experience in one or more of the six CISSP-ISSAP domains will be able to understand the advanced concepts covered in the course effectively.

CISSP-ISSAP Training Course Overview

CISSP ISSAP Training focuses on Information Systems Security Architecture, covering the design and governance of secure systems. It develops knowledge of architectural principles, risk-based design, and security controls to protect organisational information assets.

This training enables delegates to strengthen their ability to design, evaluate, and implement secure enterprise architectures. It supports informed architectural decision-making while aligning security requirements with business objectives and evolving cyber risks.

This 4-Day course offered by The Knowledge Academy equips delegates with practical insight into security architecture frameworks. Real-world scenarios-based learning help delegates apply architectural principles confidently within complex organisational environments.

CISSP-ISSAP Training Course Objectives

• To gain a thorough understanding of Information Security Architecture principles
• To master security assessment and risk management methodologies
• To learn to align business objectives with security requirements
• To develop skills in designing secure information systems
• To implement best practices for Information Security
• To understand the role of security architecture in compliance and governance
• To enhance expertise in security planning and risk assessment
• To acquire valuable insights into securing critical information assets

After completing the ISSAP Training, delegates will be able to make valuable assets in the field of Information Security. Armed with the knowledge and skills acquired, they can contribute to the design and management of secure information systems, protecting critical data, and ensuring the resilience of their organisations against modern cybersecurity threats.

What’s Included in this CISSP-ISSAP Training?

• World-Class Training Sessions from Experienced Instructors
• Interactive Learning with 24*7 Support
• Digital Delegate Pack