ISSAP Training & Certification in Shanghai

CISSP-ISSAP Training Course Outline

Domain 1: Governance, Risk, and Compliance (GRC)

Module 1: Identify Legal, Regulatory, Organisational, and Industry Requirements

• Applicable Information Security Standards and Guidelines
• Third-Party and Contractual Obligations
• Applicable Sensitive and Personal Data Standards and Privacy Regulations
• Resilient Solutions

Module 2: Architecting for Governance, Risk, and Compliance

• Identify Key Assets, Business Objectives, and Stakeholders
• Design Monitoring and Reporting
• Design for Auditability
• Incorporate Risk Assessment Artifacts
• Advise Risk Treatment

Domain 2: Security Architecture Modelling

Module 1: Identify Security Architecture Approach

• Scope and Types of Security Architecture
• Frameworks and Reference Architectures
• Threat Modelling Frameworks
• Common Vulnerability Scoring Systems

Module 2: Verify and Validate Design

• Results of Threat Modelling
• Gaps
• Alternative Solutions/Mitigations/Compensating Controls
• Internal or External Third-Party
• Code Review Methodology

Domain 3: Infrastructure and System Security Architecture

Module 1: Identify Infrastructure and System Security Requirements

• Deployment Models
• Information Technology and Operational Technology
• Physical Security
• Infrastructure and System Monitoring
• Infrastructure and System Cryptography
• Application Security

Module 2: Architect Infrastructure and System Security

• Physical Security Control Set
• Platform Security
• Network Security
• Storage Security 
• Data Repository Security
• Cloud Security
• Operational Technology 
• Endpoint Security
• Secure Shared Services 
• Third-Party Integrations
• Infrastructure Monitoring 
• Content Monitoring
• Out-of-Band Communications
• Evaluation of Security Controls for System Components

Module 3: Architect Infrastructure and System Cryptographic Solutions

• Determine Cryptographic Design Considerations and Constraints
• Determine Cryptographic Implementation in Various States
• Plan Key Management Lifecycle

Domain 4: Identity and Access Management (IAM) Architecture

Module 1: Architect Identity Lifecycle

• Establish and Verify Identity
• Assign Identifiers to Users and Systems
• Identity Provisioning and De-Provisioning
• Identity Management Technologies

Module 2: Architect Identity Authentication

• Define Authentication Approach
• Authentication Protocols and Technologies
• Authentication Control Mechanisms
• Define Trust Relationships

Module 3: Architect Identity Authorisation

• Authorisation Concepts and Principles
• Authorisation Models
• Authorisation Processes and Workflows
• Roles, Rights, and Responsibilities Related to System, Application, and Data Access Control
• Management of Privileged Accounts and Access Rights
• Authorisation Approaches

Module 4: Architect Identity Accounting

• Determine Accounting, Analysis, and Forensic Requirements
• Define Audit Events 
• Establish Audit Log Alerts and Notifications
• Log Management 
• Log Analysis and Reporting
• Compliance with Policies and Regulations

Who Should Attend this CISSP-ISSAP Training?

This CISSP-ISSAP Training is suitable for experienced security professionals who want to deepen their knowledge of information security architecture and secure system design. The following professionals can benefit from this training:

• Chief Security Architects
• Security System Engineers
• Chief Security Analysts
• Security Consultants
• IT Managers & Directors
• Security Planners
• Network Architects

Prerequisites for the CISSP-ISSAP Training

There are no formal prerequisites to attend this CISSP-ISSAP Training. However, prior experience in information security architecture or related security domains will help delegates engage effectively with the advanced course content.

CISSP-ISSAP Training Course Overview

CISSP-ISSAP Training helps experienced security professionals develop advanced understanding of information security architecture and secure system design. It covers governance and risk, architecture modelling, cryptography, IAM architecture, and secure integration.

Delegates develop skills in evaluating architectural requirements, selecting controls, assessing design options, and aligning security architecture with business objectives. They also strengthen their understanding of identity, infrastructure, and cryptographic design.

This 4-Day course helps delegates build advanced knowledge of information security architecture within complex environments. They will be better equipped to evaluate secure designs and contribute to architecture-focused security Outcomes. 

CISSP-ISSAP Training Course Objectives

• To understand information security architecture principles
• To evaluate security assessment and risk management approaches
• To align architectural security requirements with business objectives
• To develop knowledge of secure information-system design
• To understand governance and compliance within security architecture
• To evaluate infrastructure, identity, and cryptographic architecture requirements

Learning Outcomes of this CISSP-ISSAP Training

Upon completing this CISSP-ISSAP Training, delegates will understand how to evaluate and design security architecture across governance, infrastructure, IAM, and cryptographic environments. They will be better equipped to support secure architectural decisions and protect critical information assets.

What’s Included in this CISSP-ISSAP Training?

• World-Class Training Sessions from Experienced Instructors
• Interactive Learning with 24*7 Support
• Digital Delegate Pack