- Explore foundational concepts of confidentiality, integrity, and availability (CIA triad) in information security.
- Learn risk management frameworks, including risk assessment, mitigation strategies, and business continuity planning.
- Understand legal, regulatory, and compliance requirements impacting organizational security policies.
- Study ethical standards and professional practices for security governance.
ISC2 Certification Training Course
ISC2 CISSP® Certified Information Systems Security Professional Certification Training Course
Build the strategic information security expertise you need with Accumentum’s ISC2 CISSP® Certified Information Systems Security Professional Certification Training Course.
Course focus: Security and risk management, asset security, security architecture and engineering, communication and network security, identity and access management, security assessment and testing, security operations, software development security, governance and compliance, and emerging trends and threats.
Course Overview
Master the eight CISSP domains of information security and systems protection.
The ISC2 CISSP® Certified Information Systems Security Professional Certification Training Course with Accumentum provides a comprehensive exploration of the Certified Information Systems Security Professional (CISSP) certification, emphasizing the critical domains of information security and systems protection. Designed for professionals such as security analysts, IT managers, and cybersecurity specialists, this foundational course covers the essential competencies required for securing organizational systems, including security and risk management, asset security, security architecture and engineering, communication and network security, identity and access management, security assessment and testing, security operations, and software development security. Participants will gain an in-depth understanding of security frameworks, risk assessment, threat mitigation, and compliance strategies aligned with ISC2’s methodologies. The curriculum includes practical insights into designing secure systems, managing incidents, and implementing robust controls within an enterprise environment. Additionally, the course addresses ethical standards, privacy principles, and data protection practices, preparing learners for the CISSP certification exam while empowering them with the expertise to strengthen organizational cybersecurity and resilience.
Course Objectives
Build CISSP certification readiness and enterprise security leadership capability.
01
Cybersecurity Analysts and Consultants
Ideal for cybersecurity analysts, consultants, and practitioners seeking to deepen their expertise and earn the prestigious CISSP certification.
02
IT and Security Managers
Suited for leaders overseeing IT operations and security who need to implement robust security strategies and ensure organizational compliance.
03
Technical Infrastructure Professionals
Perfect for technical professionals managing infrastructure who want to enhance their skills in securing systems and mitigating risks.
04
Career Advancers
Designed for individuals with some IT or security experience aiming to advance their careers by mastering comprehensive security principles and practices.
Who Should Attend
- Security managers, directors, and CISOs who lead enterprise security programs and align controls with business risk and strategy.
- Security architects and engineers who design and review secure networks, systems, identity services, and cloud environments.
- Security operations leads and senior analysts who run detection, incident response, and vulnerability management for their organization.
- Experienced practitioners and consultants moving into security leadership who need a credential that proves broad expertise across all eight CISSP domains.
Prerequisites
- A minimum of five years of cumulative, paid work experience in two or more of the eight CISSP domains (or four years with a qualifying degree), as required by ISC2 for certification eligibility.
- Familiarity with fundamental IT concepts, including networking, systems administration, or software development, to ensure a solid foundation for advanced security topics.
- Prior exposure to cybersecurity practices, such as risk management, access control, or incident response, to facilitate comprehension of the course material.
- Willingness to engage with complex technical and managerial concepts, preparing participants for both the course and the CISSP certification exam.
Pathway Map
The CISSP training course spans the full information security domain set.
The curriculum covers security and risk management, asset security, security architecture and engineering, communication and network security, identity and access management, security assessment and testing, security operations, software development security, governance and compliance, and emerging trends and threats.
Course Content
- Define asset classification and ownership to protect sensitive data and intellectual property.
- Implement data security controls, including encryption, access restrictions, and data lifecycle management.
- Address privacy considerations and data handling requirements in compliance with global standards.
- Evaluate techniques for secure data disposal and retention policies.
- Design secure systems using security models, architectures, and engineering principles.
- Assess vulnerabilities in hardware, software, and system components to enhance resilience.
- Apply cryptographic techniques and key management practices for data protection.
- Explore secure design principles, such as least privilege and defense-in-depth.
- Secure network architectures, components, and protocols against threats and attacks.
- Implement secure communication channels, including VPNs, firewalls, and intrusion detection systems.
- Analyze network vulnerabilities and mitigation strategies for wired and wireless environments.
- Understand emerging trends like cloud security and IoT network protection.
- Manage identity lifecycle processes, including authentication, authorization, and provisioning.
- Deploy access control models, such as role-based access control (RBAC) and mandatory access control (MAC).
- Evaluate single sign-on (SSO), multi-factor authentication (MFA), and federated identity systems.
- Mitigate risks associated with insider threats and privilege escalation.
- Conduct security audits, vulnerability assessments, and penetration testing to identify weaknesses.
- Develop and execute test plans aligned with organizational risk and compliance objectives.
- Interpret assessment results to prioritize remediation and improve security posture.
- Understand tools and methodologies for continuous monitoring and security validation.
- Manage incident response processes, including detection, containment, and recovery from security breaches.
- Implement operational security controls, such as logging, monitoring, and configuration management.
- Explore disaster recovery (DR) and business continuity (BC) strategies for operational resilience.
- Address physical security measures and their integration with IT security operations.
- Integrate security into the software development lifecycle (SDLC) from design to deployment.
- Identify and mitigate common software vulnerabilities, such as SQL injection and cross-site scripting (XSS).
- Apply secure coding practices and review techniques to ensure robust application security.
- Understand DevSecOps principles and tools for automated security in development pipelines.
- Align security programs with organizational governance structures and strategic goals.
- Navigate regulatory frameworks, such as GDPR, HIPAA, and PCI-DSS, for compliance assurance.
- Develop policies, procedures, and training programs to enforce security standards.
- Measure and report on security performance using metrics and key performance indicators (KPIs).
- Analyze current and evolving cyber threats, including ransomware, phishing, and advanced persistent threats (APTs).
- Explore the impact of emerging technologies, such as artificial intelligence and quantum computing, on security.
- Adapt security strategies for cloud computing, remote work, and hybrid environments.
- Prepare for future challenges by understanding threat intelligence and proactive defense techniques.
Course Features
Designed for practical information security training and CISSP exam preparation.
Interactive Learning
Participate in training sessions, discussions, and hands-on labs with experienced instructors.
Comprehensive Study Materials
Access extensive resources, including e-books, video lectures, and practice exams.
Real-World Applications
Engage in practical exercises and case studies to apply Information Systems Security concepts.
Certification Preparation
Receive guidance and tips to successfully pass the ISC2 CISSP® Certified Information Systems Security Professional certification exam.
Certification Exam
Prepare for the official ISC2 CISSP certification exam.
CISSP Exam Readiness
Accumentum’s CISSP Training Course prepares learners to design, implement, and manage robust cybersecurity programs across the enterprise.
Upon completing the ISC2 CISSP® Certified Information Systems Security Professional Certification Training Course with Accumentum, you will be fully equipped to take the Certified Information Systems Security Professional (CISSP) exam. This certification affirms your comprehensive expertise in information security, risk management, and system protection, showcasing your ability to design, implement, and manage robust cybersecurity programs. Earning the CISSP certification will greatly elevate your career trajectory, positioning you for advanced roles that demand strategic leadership in securing organizational systems, mitigating risks, and ensuring compliance with industry standards and regulations.
Exam Outline
The full CISSP exam outline.
This is the official ISC2 CISSP exam outline: 8 domains and 62 objectives, in ISC2's own wording. Our course maps lessons and practice to each one.
Domain 1: Security and Risk Management
Average weight 16%
- 1.1 Understand, adhere to, and promote professional ethics
- 1.2 Understand and apply security concepts
- 1.3 Evaluate and apply security governance principles
- 1.4 Understand legal, regulatory, and compliance issues that pertain to information security in a holistic context
- 1.5 Understand requirements for investigation types (that is administrative, criminal, civil, regulatory, industry standards)
- 1.6 Develop, document, and implement security policy, standards, procedures, and guidelines
- 1.7 Identify, analyze, assess, prioritize, and implement Business Continuity (BC) requirements
- 1.8 Contribute to and enforce personnel security policies and procedures
- 1.9 Understand and apply risk management concepts
- 1.10 Understand and apply threat modeling concepts and methodologies
- 1.11 Apply Supply Chain Risk Management (SCRM) concepts
- 1.12 Establish and maintain a security awareness, education, and training program
Domain 2: Asset Security
Average weight 10%
- 2.1 Identify and classify information and assets
- 2.2 Establish information and asset handling requirements
- 2.3 Provision information and assets securely
- 2.4 Manage data lifecycle
- 2.5 Ensure appropriate asset retention (for example End of Life (EOL), End of Support)
- 2.6 Determine data security controls and compliance requirements
Domain 3: Security Architecture and Engineering
Average weight 13%
- 3.1 Research, implement and manage engineering processes using secure design principles
- 3.2 Understand the fundamental concepts of security models (for example Biba, Star Model, Bell-LaPadula)
- 3.3 Select controls based upon systems security requirements
- 3.4 Understand security capabilities of Information Systems (IS) (for example memory protection, Trusted Platform Module (TPM), encryption/decryption)
- 3.5 Assess and mitigate the vulnerabilities of security architectures, designs, and solution elements
- 3.6 Select and determine cryptographic solutions
- 3.7 Understand methods of cryptanalytic attacks
- 3.8 Apply security principles to site and facility design
- 3.9 Design site and facility security controls
- 3.10 Manage the information system lifecycle
Domain 4: Communication and Network Security
Average weight 13%
- 4.1 Apply secure design principles in network architectures
- 4.2 Secure network components
- 4.3 Implement secure communication channels according to design
Domain 5: Identity and Access Management (IAM)
Average weight 13%
- 5.1 Control physical and logical access to assets
- 5.2 Design identification and authentication strategy (for example people, devices, and services)
- 5.3 Federated identity with a third-party service
- 5.4 Implement and manage authorization mechanisms
- 5.5 Manage the identity and access provisioning lifecycle
- 5.6 Implement authentication systems
Domain 6: Security Assessment and Testing
Average weight 12%
- 6.1 Design and validate assessment, test, and audit strategies
- 6.2 Conduct security control testing
- 6.3 Collect security process data (for example technical and administrative)
- 6.4 Analyze test output and generate report
- 6.5 Conduct or facilitate security audits
Domain 7: Security Operations
Average weight 13%
- 7.1 Understand and comply with investigations
- 7.2 Conduct logging and monitoring activities
- 7.3 Perform Configuration Management (CM) (for example provisioning, baselining, automation)
- 7.4 Apply foundational security operations concepts
- 7.5 Apply resource protection
- 7.6 Conduct incident management
- 7.7 Operate and maintain detection and preventative measures
- 7.8 Implement and support patch and vulnerability management
- 7.9 Understand and participate in change management processes
- 7.10 Implement recovery strategies
- 7.11 Implement Disaster Recovery (DR) processes
- 7.12 Test Disaster Recovery Plans (DRP)
- 7.13 Participate in Business Continuity (BC) planning and exercises
- 7.14 Implement and manage physical security
- 7.15 Address personnel safety and security concerns
Domain 8: Software Development Security
Average weight 10%
- 8.1 Understand and integrate security in the Software Development Life Cycle (SDLC)
- 8.2 Identify and apply security controls in software development ecosystems
- 8.3 Assess the effectiveness of software security
- 8.4 Assess security impact of acquired software
- 8.5 Define and apply secure coding guidelines and standards
Exam Facts
How the CISSP exam works.
Format
- Length of exam: 3 hours
- Number of items: 100, 150
- Item format: Multiple choice and advanced item types
- Passing grade: 700 out of 1000 points
- Exam language availability: Chinese, English, German, Japanese, Spanish
Domain weights
- Security and Risk Management, 16%
- Asset Security, 10%
- Security Architecture and Engineering, 13%
- Communication and Network Security, 13%
- Identity and Access Management (IAM), 13%
- Security Assessment and Testing, 12%
- Security Operations, 13%
- Software Development Security, 10%
Requirements
Experience and upkeep for CISSP.
ISC2 asks for at least five years of cumulative, full time experience in two or more of the eight CISSP domains. A relevant bachelor's or master's degree, or a credential on the ISC2 approved list, can satisfy one of those years. Part time work and internships can count too. If you pass before you have the experience, you can become an Associate of ISC2 while you earn it.
Once certified, ISC2 requires continuing professional education (CPE) credits and an Annual Maintenance Fee to keep the credential active.
Study Plan
A practical path to CISSP.
We start with the domain map. CISSP has 8 domains, and the heaviest is Security and Risk Management (16%). It gets the longest blocks and the most practice questions.
Each domain follows the same pattern. We teach the concepts, walk through a scenario, then work questions in the ISC2 style, where more than one answer looks right and you pick the best one for the situation.
Expect advanced item types as well as multiple choice. We practice those formats so the question style isn't new on test day.
The last stretch is review. You take a full length practice exam under the real time limit, then we go back over the domains where you dropped points.
Career Outlook
Where CISSP can take you.
CISSP is the credential hiring managers ask for when a role carries responsibility for a security program. Titles include security manager, security architect, security consultant, IT director and CISO. It is also common in DoD and federal contractor job posts.
The U.S. Bureau of Labor Statistics reports that the median annual wage for information security analysts was $129,180 in May 2025. BLS also projects employment of information security analysts to grow 21 percent from 2025 to 2035, much faster than the average for all occupations. Treat it as a reference point and not a promise. Location, experience and the employer drive what any one person earns. Source: BLS Occupational Outlook Handbook.
Funding and PathPay
Ways to pay for CISSP training.
Accumentum is an Army CA and Air Force COOL Approved Vendor. If you're serving, start with your education center and read our Army CA and Air Force COOL pages for the steps.
Paying on your own? CISSP prep is eligible for PathPay, our monthly payment plan. Terms of 3, 4 and 6 months carry no added fee. 9, 12 and 18 month terms add 5%, 10% and 15%. Course access opens when your first payment clears.
Our funding page has every other option, and you can talk with us or email info@accumentum.net before you enroll.
Frequently Asked Questions
Understand how Accumentum’s ISC2 CISSP® Certified Information Systems Security Professional Certification Training Course supports certification preparation, eligibility, course content, delivery, and career advancement.
The Certified Information Systems Security Professional (CISSP) credential from ISC2 validates the expertise covered in this course. Upon completing the ISC2 CISSP® Certified Information Systems Security Professional Certification Training Course with Accumentum, you will be fully equipped to take the Certified Information Systems Security Professional (CISSP) exam. This certification affirms your comprehensive expertise in information security, risk management, and system protection, showcasing your ability to design, implement, and manage robust cybersecurity programs. Earning the CISSP certification will greatly elevate your career trajectory, positioning you for advanced roles that demand strategic leadership in securing organizational systems, mitigating risks, and ensuring compliance with industry standards and regulations.
Security managers, directors, and CISOs who lead enterprise security programs and align controls with business risk and strategy. Security architects and engineers who design and review secure networks, systems, identity services, and cloud environments. Security operations leads and senior analysts who run detection, incident response, and vulnerability management for their organization. Experienced practitioners and consultants moving into security leadership who need a credential that proves broad expertise across all eight CISSP domains.
A minimum of five years of cumulative, paid work experience in two or more of the eight CISSP domains (or four years with a qualifying degree), as required by ISC2 for certification eligibility. Familiarity with fundamental IT concepts, including networking, systems administration, or software development, to ensure a solid foundation for advanced security topics. Prior exposure to cybersecurity practices, such as risk management, access control, or incident response, to facilitate comprehension of the course material. Willingness to engage with complex technical and managerial concepts, preparing participants for both the course and the CISSP certification exam.
The curriculum covers security and risk management, asset security, security architecture and engineering, communication and network security, identity and access management, security assessment and testing, security operations, software development security, governance and compliance, and emerging trends and threats.
Yes. Receive guidance and tips to successfully pass the ISC2 CISSP® Certified Information Systems Security Professional certification exam.
Yes. Participate in training sessions, discussions, and hands-on labs with experienced instructors. Engage in practical exercises and case studies to apply Information Systems Security concepts.
Access extensive resources, including e-books, video lectures, and practice exams.
The course content is delivered in 10 modules: Security and Risk Management, Asset Security, Security Architecture and Engineering, Communication and Network Security, Identity and Access Management (IAM), Security Assessment and Testing, Security Operations, Software Development Security, Governance and Compliance, Emerging Trends and Threats.
Enroll in the ISC2 CISSP® Certified Information Systems Security Professional Certification Training Course with Accumentum to advance your expertise in cybersecurity to a comprehensive level and earn a globally recognized credential. This course is your gateway to becoming a Certified Information Systems Security Professional (CISSP). For detailed information and to secure your spot, visit Accumentum's registration page linked below.
This certification affirms your comprehensive expertise in information security, risk management, and system protection, showcasing your ability to design, implement, and manage robust cybersecurity programs. Earning the CISSP certification will greatly elevate your career trajectory, positioning you for advanced roles that demand strategic leadership in securing organizational systems, mitigating risks, and ensuring compliance with industry standards and regulations.
ISC2 lists the exam at 3 hours with 100, 150 items.
ISC2 sets the passing grade at 700 out of 1000 points.
ISC2 publishes these average weights:
- Security and Risk Management, 16%
- Asset Security, 10%
- Security Architecture and Engineering, 13%
- Communication and Network Security, 13%
- Identity and Access Management (IAM), 13%
- Security Assessment and Testing, 12%
- Security Operations, 13%
- Software Development Security, 10%
Security and Risk Management carries the most weight at 16%.
ISC2 asks for at least five years of cumulative, full time experience in two or more of the eight CISSP domains. A relevant bachelor's or master's degree, or a credential on the ISC2 approved list, can satisfy one of those years. Part time work and internships can count too. If you pass before you have the experience, you can become an Associate of ISC2 while you earn it.
Once certified, ISC2 requires continuing professional education (CPE) credits and an Annual Maintenance Fee to keep the credential active.
Accumentum is an Army CA and Air Force COOL Approved Vendor. Start with your education center, and we'll help with the rest.
Yes. CISSP prep is eligible for PathPay. Terms of 3, 4 and 6 months add no fee, and longer terms add 5% to 15%.
Enrollment
Enroll in the ISC2 CISSP® Certification Training Course with Accumentum.
Enroll in the ISC2 CISSP® Certified Information Systems Security Professional Certification Training Course with Accumentum to advance your expertise in cybersecurity to a comprehensive level and earn a globally recognized credential. This course is your gateway to becoming a Certified Information Systems Security Professional (CISSP). For detailed information and to secure your spot, visit Accumentum's registration page linked below.
Advance your cybersecurity career with CISSP information security training.
Prepare for the ISC2 CISSP certification exam, master security and risk management, and build the architecture, operations, and governance skills that enterprises depend on.