Security Architect

Information Systems Security Architecture Professional (ISSAP)

The intensive Information Systems Security Architecture Professional (ISSAP) course certifies you as a leading security professional who specializes in designing security solutions and providing management with risk-based security solutions to achieve business objectives in IT security. This involves security solutions from the organizational context (e.g. vision, mission, strategy, policies, requirements, changes and external factors).

On-Site/Virtual

Preise ab€ 2.190 zzgl. 19% Ust

duration: 3 days

Level: Fortgeschrittene

Code: ISSAP

CPEs: 56

The training courses are carried out in cooperation with Information Security Academy IS@R2, an official training partner of ISC2. This provides access to authorized trainers and the official training material.

Buchen Sie noch heute online oder rufen Sie uns an unter +49 7031 2024742, wenn Sie Hilfe bei der Auswahl des richtigen Kurses benötigen oder über Firmenrabatte sprechen möchten.

The ISSAP is a specialized CISSP concentration that provides professionals with in-depth knowledge in the planning, development and implementation of security architectures in complex IT systems.

Your benefits

Schönbrunn TASC is an accredited training organization (ATO). This means that you have access to official course materials and can take your Information Systems Security Architecture Professional (ISSAP) exam during the course at the Schönbrunn TASC Training Center. If you do not pass the exam on your first attempt (which we do not expect), our performance guarantee will cover you - this means you train for free the second time.

You learn in small groups (max. 10 participants per course)
In-house modern training room and test center in a distraction-free, quiet atmosphere (PSI/ Pearson Vue/ Kryterion)
Experienced, constantly trained and ISC2 Authorized Instructors guide you through the course
You will receive comprehensive official ISC2 training materials, manuals and case studies for self-study
interactive discussions and group work will help you in the application
a small breakfast, lunch, snacks and drinks are provided throughout the day
hotel recommendations near the training and test center
it is possible to take the exam at the Schönbrunn TASC test center afterwards**

Requirements

CISSP + 2 years of professional experience, alternatively 7 years of professional experience

Target group

The ISSAP is an ideal qualification for a Chief Security Architect, analysts or professionals with similar responsibilities.

Training schedule

Domain 1: Architect for Governance, Compliance and Risk Management

1.1 Determine legal, regulatory, organizational and industry requirements

1.2 Manage Risk

Domain 2: Security Architecture Modeling

2.1 Identify security architecture approach

2.2 Verify and validate design (e.g., Functional Acceptance Testing (FAT), regression)

Domain 3: Infrastructure Security Architecture

3.1 Develop infrastructure security requirements

3.2 Design defense-in-depth architecture

3.3 Secure shared services (e.g., wireless, e-mail, Voice over Internet Protocol (VoIP), UnifiedCommunications (UC), Domain Name System (DNS), Network Time Protocol (NTP))

3.4 Integrate technical security controls

3.5 Design and integrate infrastructure monitoring

3.6 Design infrastructure cryptographic solutions

3.7 Design secure network and communication infrastructure (e.g., Virtual Private Network (VPN), Internet Protocol Security (IPsec), Transport Layer Security (TLS))

3.8 Evaluate physical and environmental security requirements

Domain 4: Identity and Access Management (IAM) Architecture

4.1 Design identity management and lifecycle

4.2 Design access control management and lifecycle

4.3 Design identity and access solutions)

Domain 5: Architect for Application Security

5.1 Integrate Software Development Life Cycle (SDLC) with application security architecture

(e.g., Requirements Traceability Matrix (RTM), security architecture documentation, secure coding)

5.2 Determine application security capability requirements and strategy (e.g., open source,

Cloud Service Providers (CSP), Software as a Service (SaaS)/Infrastructure as a Service (IaaS)/ Platform as a Service (PaaS) environments)

5.3 Identify common proactive controls for applications (e.g., Open Web Application Security Project (OWASP))

Domain 6: Security Operations Architecture

6.1 Gather security operations requirements (e.g., legal, compliance, organizational, and business requirements)

6.2 Design information security monitoring (e.g., Security Information and Event Management (SIEM), insider threat, threat intelligence, user behavior analytics, Incident Response (IR) procedures)

6.3 Design business continuity (BC) and resiliency solutions

6.4 Validate Business Continuity Plan (BCP)/Disaster Recovery Plan (DRP) architecture

6.5 Design Incident Response (IR) management

Certification