CISSP — Certified Information Systems Security Professional
An exam-aligned certification program for the world's most recognized senior-level information security credential. Master all eight ISC2 domains — from risk management and security architecture to IAM, security operations, and software development security — with AI/ML security threads woven throughout, exactly as the current exam outline demands.
The CISSP — Certified Information Systems Security Professional program is an instructor-led certification course for ISC2's advanced, senior-level information security credential. Every module is mapped directly to the official ISC2 CISSP Exam Outline (effective April 15, 2024), so what you study is exactly what the exam tests.
You will work through all eight domains — security and risk management, asset security, security architecture and engineering, communication and network security, identity and access management, security assessment and testing, security operations, and software development security. Reflecting the current outline, AI/ML security is interwoven across all eight domains — securing training data and models, defending against adversarial attacks and prompt injection, and using AI for defensive automation — rather than treated as a standalone topic. The course closes with full-length mock exams modeled on the Computerized Adaptive Testing (CAT) format.
On completion you will be ready to sit the CISSP exam and to step into senior security leadership and architecture roles.
Exam at a Glance
- Certification: CISSP — Certified Information Systems Security Professional | Offered by: ISC2
- Level: Advanced / senior-level information security certification
- Accreditation: ANSI National Accreditation Board (ANAB) ISO/IEC 17024; approved under U.S. DoD Directive 8140/8570
- Experience: Minimum 5 years cumulative, full-time professional work experience in 2+ of the 8 domains. A relevant post-secondary degree or an additional approved ISC2 credential may waive up to 1 year (max 1 year total). Without the experience, pass the exam to become an Associate of ISC2, then earn the 5 years within 6 years.
- Format: Computerized Adaptive Testing (CAT); 100–150 items (multiple choice and advanced item types such as drag-and-drop and hotspot) | Length: 3 hours
- Passing score: 700 out of 1000 points
- Languages: English, Chinese, German, Japanese, Spanish | Delivery: ISC2 Authorized Pearson VUE Testing Centers
- Maintenance: Valid 3 years; maintained via Continuing Professional Education (CPE) credits
- Outline basis: Official ISC2 CISSP Exam Outline, effective April 15, 2024
Exam Domains & Weightings
- Domain 1 — Security and Risk Management — 16%
- Domain 2 — Asset Security — 10%
- Domain 3 — Security Architecture and Engineering — 13%
- Domain 4 — Communication and Network Security — 13%
- Domain 5 — Identity and Access Management (IAM) — 13%
- Domain 6 — Security Assessment and Testing — 12%
- Domain 7 — Security Operations — 13%
- Domain 8 — Software Development Security — 10%
Course Highlights
- 100% aligned to the official ISC2 exam outline (April 15, 2024)
- All eight domains covered in exam-weighted depth
- AI/ML security interwoven across every domain, matching the current outline
- Scenario-driven: think like a risk-focused security leader, not a technician
- CAT-format mock exams with detailed rationales
- Experience-path guidance: Associate of ISC2 route and the 1-year waiver
Learning Outcomes
- Govern security programs with risk management, BC/BIA, and compliance frameworks
- Classify, handle, and protect assets across the full data lifecycle
- Engineer secure architectures, cryptographic solutions, and facilities
- Design secure networks and identity/access management at enterprise scale
- Run assessments, audits, security operations, incident response, and DR
- Secure the SDLC — and pass the CISSP exam with confidence
Job Opportunities
- Chief Information Security Officer (CISO)
- Security Architect
- Security Manager / Director of Security
- Security Consultant / Analyst
- Security Engineer
- IT Audit & Compliance Lead
Material Includes
- Class recordings
- Domain study guides
- CAT-style mock exams
- Certificate
Who Can Join
- Security Professionals & Analysts
- Network/System Administrators & Engineers
- IT Managers & Auditors
Estimated Time: 7–8 Hours
Topics:- Professional ethics (ISC2 Code of Ethics; organizational codes)
- Core security concepts: the 5 pillars — confidentiality, integrity, availability, authenticity, and nonrepudiation
- Security governance principles; alignment to business strategy; control frameworks (ISO, NIST, COBIT, SABSA, PCI, FedRAMP); due care / due diligence
- Legal, regulatory, and compliance issues; cybercrime and data breaches; IP and licensing; import/export controls; transborder data flow; privacy (GDPR, CCPA, etc.)
- Investigation types (administrative, criminal, civil, regulatory, industry standards)
- Security policies, standards, procedures, and guidelines
- Business Continuity (BC) requirements and Business Impact Analysis (BIA)
- Personnel security policies (screening, agreements, onboarding/transfer/termination)
- Risk management concepts (threat/vulnerability ID, risk analysis and treatment, control types, continuous monitoring, risk frameworks)
- Threat modeling; Supply Chain Risk Management (SCRM)
- Security awareness, education, and training programs
- Run a BIA and build a risk register for a case-study organization
- Threat-model a system including AI/ML components
Estimated Time: 4–5 Hours
Topics:- Identify and classify information and assets (data and asset classification)
- Establish information and asset handling requirements
- Provision information and assets securely (ownership, inventory, asset management)
- Manage the data lifecycle (data roles, collection, location, retention, remanence, destruction)
- Ensure appropriate asset retention (EOL, End of Support)
- Determine data security controls and compliance requirements (data states, scoping and tailoring, standards selection, DRM/DLP/CASB)
- Build a data classification and handling matrix for a case study
- Map lifecycle controls from collection through destruction
Estimated Time: 6–7 Hours
Topics:- Secure design principles (least privilege, defense in depth, secure defaults, fail securely, SoD, zero trust, privacy by design, shared responsibility, SASE)
- Security models (Biba, Bell-LaPadula, Star Model)
- Select controls based on systems security requirements
- Security capabilities of information systems (memory protection, TPM, encryption)
- Assess/mitigate vulnerabilities of architectures (client/server, databases, cloud, ICS, IoT, microservices, containerization, serverless, embedded, edge, virtualized)
- Cryptographic solutions and lifecycle (symmetric/asymmetric, elliptic curve, quantum, PKI); cryptanalytic attacks (brute force, side-channel, MITM, pass-the-hash, ransomware)
- Site and facility security design (data centers, HVAC, fire suppression, power)
- Information system lifecycle management
- Design a zero-trust architecture for a hybrid estate
- Select cryptographic solutions and defend against adversarial AI attacks
Estimated Time: 6–7 Hours
Topics:- Secure network architecture design (OSI and TCP/IP models, IPv4/IPv6, secure protocols IPSec/SSH/TLS, converged and multilayer protocols)
- Segmentation (physical, logical, micro-segmentation), edge/wireless/cellular networks, CDNs, SDN, VPC, network monitoring and management
- Secure network components (infrastructure operation, transmission media, NAC, endpoint security)
- Secure communication channels (voice/video/collaboration, remote access, data comms, third-party connectivity)
- Design a segmented network with secure protocols and NAC
- Evaluate remote access and third-party connectivity risks
Estimated Time: 6–7 Hours
Topics:- Control physical and logical access to assets (information, systems, devices, facilities, applications, services)
- Identification and authentication strategy (AAA, MFA, passwordless, session management, FIM, credential management, SSO, Just-In-Time)
- Federated identity with third-party services (on-premises, cloud, hybrid)
- Authorization mechanisms (RBAC, rule-based, MAC, DAC, ABAC, risk-based, policy enforcement)
- Identity and access provisioning lifecycle (access review, provisioning/deprovisioning, role transition, privilege escalation, service account management)
- Implement authentication systems
- Design an MFA + SSO strategy with federated identity
- Walk an identity through the full provisioning lifecycle
Estimated Time: 5–6 Hours
Topics:- Design and validate assessment, test, and audit strategies (internal, external, third-party)
- Conduct security control testing (vulnerability assessment, penetration testing / red-blue-purple teams, log reviews, code review, misuse case testing, interface testing, breach attack simulations, compliance checks)
- Collect security process data (account management, KPIs/KRIs, backup verification, training, DR/BC)
- Analyze test output and generate reports (remediation, exception handling, ethical disclosure)
- Conduct or facilitate security audits (internal, external, third-party)
- Plan a penetration test and interpret its findings report
- Build a KPI/KRI dashboard for a security program
Estimated Time: 6–7 Hours
Topics:- Investigations (evidence collection/handling, reporting, digital forensics, artifacts)
- Logging and monitoring (IDPS, SIEM, continuous monitoring, egress monitoring, threat intelligence and hunting, UEBA)
- Configuration Management; foundational operations concepts (need-to-know/least privilege, SoD, privileged account management, job rotation, SLAs)
- Resource protection; incident management (detection, response, mitigation, reporting, recovery, remediation, lessons learned)
- Detective and preventative measures (firewalls, IDS/IPS, sandboxing, honeypots, anti-malware, ML/AI-based tools); patch and vulnerability management; change management
- Recovery strategies; Disaster Recovery (DR) processes and testing; BC planning
- Physical security; personnel safety and security (travel, duress, emergency management)
- Run an incident response tabletop from detection to lessons learned
- Design a DR test plan with SIEM-driven monitoring
Estimated Time: 4–5 Hours
Topics:- Integrate security into the SDLC (Agile, Waterfall, DevOps, DevSecOps; maturity models CMM/SAMM; change management)
- Security controls in development ecosystems (languages, libraries, toolsets, IDE, CI/CD, code repositories, application security testing — SAST, DAST, IAST, SCA)
- Assess effectiveness of software security (auditing/logging of changes, risk analysis)
- Assess security impact of acquired software (COTS, open source, third-party, managed and cloud services)
- Define and apply secure coding guidelines and standards (source-code weaknesses, API security, secure coding practices, software-defined security)
- Thread security gates (SAST/DAST/SCA) into a CI/CD pipeline
- Review code and APIs against secure coding standards — including prompt-injection defenses
Estimated Time: 4–5 Hours
Learning Objectives:- Master the Computerized Adaptive Testing (CAT) format and pacing for 100–150 items in 3 hours
- Answer like a security leader: risk-first, business-aligned reasoning
- CAT mechanics and strategy; advanced item types (drag-and-drop, hotspot)
- Domain-by-domain review keyed to the official weightings
- Certification path: experience requirement, the 1-year waiver, and the Associate of ISC2 route; 3-year CPE maintenance cycle
- Full-length CAT-style mock exams with detailed rationales
- Weak-domain drills and final review
Yes!! Please click on Free Demo and submit your contact details to attend free live demo class.
Online LIVE instructor training refers to training sessions conducted over the internet in real-time by experienced instructors. Participants join these sessions remotely from their own devices and interact with the instructor and fellow learners as if they were in a physical classroom.
If you need any assistance during the enrollment process or have questions about our courses, feel free to reach out to us. You can contact us via:
- What's App: +91 73-01-11-21-31 for immediate assistance during business hours.
- Email: Send your inquiries to hello@progmatrix.com, and one of our representatives will get back to you as soon as possible.
- Website: You can also use the contact form on our website to send us a message directly.
To join a live training session, you need to enroll in the course through our website. Once enrolled, you will receive access credentials and instructions on how to join the live sessions. Typically, you will log in to our learning platform at the scheduled time and access the live session from there.
You will need a stable internet connection, a computer or mobile device, and a web browser to participate in live training sessions. Additionally, you may need to download and install any necessary software or applications, which will be communicated to you prior to the session.
Yes , Progmatrix courses are “One Time Pay, LifeTime Access”. Student can rejoin live classes up to one year. Class videos are for life time access.
If you miss a live session, don’t worry! Recordings of all sessions will be made available to registered participants for later viewing. However, we encourage active participation in live sessions to maximize the learning experience.
Prerequisites vary depending on the specific course. Some courses may have prerequisite knowledge or experience requirements, which will be clearly outlined in the course description. In general, our courses cater to learners of all levels, from beginners to experienced professionals.
The classes are Instructor-led, Live Online classes where you will have face-to-face interaction with your Instructor. Recorded class videos are provided for life time access.
Yes, absolutely! Our live training sessions are interactive, allowing you to ask questions, seek clarification, and engage in discussions with the instructor and other participants in real-time.
You can communicate with the instructor and seek support through various channels, including email, discussion forums on our learning platform, and scheduled office hours. Additionally, our support team is available to assist you with any technical or administrative queries.
After enrolling, you will get access to our Learning Management System. You will have access to materials, class notes, videos, quiz, forums etc.
Yes, many of our live training sessions include practical exercises, demonstrations, and interactive activities to reinforce learning concepts and enhance practical skills development.
Yes, upon successful completion of the course requirements, including attendance and any assessments, you will receive a certificate of completion acknowledging your participation and achievement in the live instructor training course.
We value your feedback! At the end of each live session or course, you will have the opportunity to provide feedback through course evaluations or surveys. Your input helps us continuously improve our training offerings.
Yes. You can also refer your friends to get discount and referral bonus.