CISSP (Certified Information Systems Security Professional)
Format
Self-paced
Price
£199
About the course
Develop practical information security skills through a series of self-paced, hands-on labs aligned with key concepts associated with the Certified Information Systems Security Professional (CISSP) certification.
The course introduces security and risk management principles alongside practical security technologies and administrative procedures, covering encryption and hashing, configuration management, authentication, access control, network security, endpoint protection, and system hardening.
Learners will work through practical scenarios involving OpenPGP encryption, SSH two-factor authentication, SSL VPN configuration, IPv4 and IPv6 access control lists, Linux iptables, Windows command-line tools, endpoint protection deployment, BitLocker encryption for portable media, remote desktop management, and role-based security administration.
Additional labs explore configuration baselines, security scanning with MBSA and OpenVAS, compliance patching, passive network topology discovery, backup and recovery, Snort installation and verification, IIS configuration and security, and secure SSH connections.
The course also includes controlled exercises involving the Damn Vulnerable Web Application (DVWA), manual SQL injection, and password cracking.
The labs connect security theory with practical implementation, helping learners understand how security controls protect systems, manage access, reduce vulnerabilities, support compliance, and improve operational resilience.
Activities also reinforce the importance of identifying weaknesses, applying appropriate remediation measures, monitoring systems, and validating security configurations.
By completing the labs, learners will develop foundational practical skills in risk management, cryptography, identity and access management, network defense, vulnerability assessment, endpoint security, secure system administration, intrusion detection, and disaster recovery.
The course provides hands-on preparation to complement broader CISSP study and supports further development in enterprise information security, security operations, and infrastructure protection.
The course introduces security and risk management principles alongside practical security technologies and administrative procedures, covering encryption and hashing, configuration management, authentication, access control, network security, endpoint protection, and system hardening.
Learners will work through practical scenarios involving OpenPGP encryption, SSH two-factor authentication, SSL VPN configuration, IPv4 and IPv6 access control lists, Linux iptables, Windows command-line tools, endpoint protection deployment, BitLocker encryption for portable media, remote desktop management, and role-based security administration.
Additional labs explore configuration baselines, security scanning with MBSA and OpenVAS, compliance patching, passive network topology discovery, backup and recovery, Snort installation and verification, IIS configuration and security, and secure SSH connections.
The course also includes controlled exercises involving the Damn Vulnerable Web Application (DVWA), manual SQL injection, and password cracking.
The labs connect security theory with practical implementation, helping learners understand how security controls protect systems, manage access, reduce vulnerabilities, support compliance, and improve operational resilience.
Activities also reinforce the importance of identifying weaknesses, applying appropriate remediation measures, monitoring systems, and validating security configurations.
By completing the labs, learners will develop foundational practical skills in risk management, cryptography, identity and access management, network defense, vulnerability assessment, endpoint security, secure system administration, intrusion detection, and disaster recovery.
The course provides hands-on preparation to complement broader CISSP study and supports further development in enterprise information security, security operations, and infrastructure protection.