Learning Outcomes

Understanding and Promoting Ethics

Security Governance

Legal and Compliance Issues

Incident Requirements

Lesson Summary

This module introduces the 5 pillars of Information Security, ISC2 Code of Professional Ethics and the security control frameworks. You'll learn about privacy regulations and the role of security in investigative processes. You'll explore the organisations' role in creating and maintaining security policies, standards, procedures, and guidelines.

Implementing Business Continuity

Risk Management Concepts

Threat Modelling

This module discusses how security risk analysis impacts business continuity planning. You’ll explore the methodologies for threat modelling and the significance of employment agreements in identifying and mitigating security risks. You’ll learn about the emerging threats and strategies for mitigating risks with actionable security policies.

Classify Information and Assets

Establish Information and Asset Handling Requirements

Provision Information and Assets Securely

Ensure Appropriate Asset Retention

Data Security Controls and Compliance Requirements

This module discusses steps to ensuring asset security. You'll learn to classify information, categorise assets and the importance of guidelines and Zero-trust policies in information and asset management. You'll explore the critical role of compliance in managing the data lifecycle and protection against breaches and unauthorised access.

Implementing Secure Design Principles

Understanding Security Models

Assessing and Mitigating Vulnerabilities in Security Architectures

Mitigating Vulnerabilities in Security Architecture

This module introduces security models and teaches you to identify vulnerabilities and enhance the security system. You'll explore strategies for aligning and implementing security controls with the organisation's risk management. You'll learn about cryptographic methods and the role of Public Key Infrastructure (PKI) in secure communications.

Interim Assessment 1

This assessment enables you to review your learning to determine your knowledge and understanding of the first four modules of the course. 
If you do not achieve the required grade after the first attempt, you can retake the assessment until a successful outcome is achieved.

Cryptanalytic Attacks

Designing Site and Facility Security Controls

Managing the Information System Lifecycle

Emerging Security Technologies

This module examines how cryptanalytic attacks target weaknesses in cryptographic systems. It emphasizes integrating security early in development and covers key concepts such as security principles, Homomorphic encryption, and quantum-safe solutions to reduce vulnerabilities and combat threats.

Applying Secure Design Principles in Network Architectures

Traffic Flows and Segmentation

Securing Network Components

Network Security and Its Implications for Modern Communication

Quantum-Safe Cryptography and Post-Quantum Network Security

In this module, you'll explore the role of security network models in systematic protection against cyber threats. You'll learn about the security challenges of 5G network and transport architectures, traffic segmentation, and secure communication channel strategies to mitigate security risks.

Controlling Physical and Logical Access to Assets

Federated Identity with a Third-Party Service

Manage the Identity and Access Provisioning Lifecycle

Modern Identity and Access Management (IAM) Strategies

This module discusses strategies to control physical and logical access to sensitive information. You'll learn about the concept and application of Federated Identity Management (FIM) in simplifying access across multiple systems. You'll explore advanced authentication systems to meet security and usability requirements of organisations.

Design and Validate Assessment, Test, and Audit Strategies

Conduct Security Control Testing

Collect Security Process Data

Analyse Test Output and Generate Report

This module covers principles for designing and validating security assessments. Learn techniques to identify vulnerabilities, conduct internal, external, and third-party audits, and apply automated tools and AI-driven solutions for continuous compliance across varied environments.

Interim Assessment 2

This assessment enables you to review your learning to determine your knowledge and understanding of modules 5 to 8 of the course. 
If you do not achieve the required grade after the first attempt, you can retake the assessment until a successful outcome is achieved.

Understand and Comply with Investigations

Conduct Logging and Monitoring Activities

Perform Configuration Management

Conduct Incident Management

This module explores digital forensics techniques and the role of IDPS and SIEM systems in monitoring, detecting, and preventing security threats. You'll learn how AI, sandboxing, and third-party security services enhance detection capabilities. You'll also examine media management, protection techniques, and data-safeguarding methods.

Implement and Support Patch and Vulnerability Management

Test Disaster Recovery Plans (DRP)

Threat intelligence and Threat Hunting

This module discusses patch and vulnerability management, change management processes, and recovery strategies. You’ll explore disaster recovery, business continuity, physical security controls, and insider threat management. You’ll also learn how threat intelligence and threat-hunting techniques help enhance organisational security.

Understand & Integrate Security in the Software Development Life Cycle

Assess the Effectiveness of Software Security

Security in Software Development Methodologies

Software Security Assurance and Compliance

Secure API Development & API Security Best Practices

This module explores integrating security into SDLC methodologies and applying secure coding practices. You’ll learn to assess security in acquired software, apply controls in CI/CD pipelines, and ensure compliance. You’ll master secure API development, threat mitigation, and strategies to maintain security throughout the software lifecycle.

Certified Information Systems Security Professional (CISSP 2024) - Course Assessment

Advance your cybersecurity skills, ensure compliance, and protect information systems with this free online course.

Diploma in Certified Information Systems Security Professional (CISSP 2024)

Are you ready to become a top cybersecurity professional? This course equips you with cutting-edge skills in risk management, security governance, and threat modelling. Gain expertise in security architecture, enforce compliance and achieve CISSP certification to advance your career in cybersecurity. This course was reviewed and approved by a qualified subject matter expert, Asim Suleman, a Cybersecurity Specialist. Enrol now!

6 Best Courses to Become an Influencer in 2025

Why Duolingo is Worth More Than Coursera and Udemy Combined

10 Best Assembly Language Courses for 2025: Bare-Metal Programming

7 Best Reverse Engineering Courses for 2025

Why Coursera Stock Dropped by 20%

Duolingo Q1 2026: Toward 100M DAUs with Record Engagement and Slower Paid Growth