This course continues your Certified Information Systems Security Professional (CISSP) preparation by concentrating on the final four domains of the CISSP CBK. Practice questions and detailed rationales strengthen your understanding of identity management, security testing, operational security, and secure software development.Domains and Subdomains CoveredDomain 5 – Identity and Access Management (IAM)Physical and logical access control conceptsIdentification, authentication, and authorization mechanismsSingle sign-on and federated identity managementAccess control models (MAC, DAC, RBAC, ABAC)Identity as a Service (IDaaS) and cloud access solutionsThird-party identity services and lifecycle managementDomain 6 – Security Assessment and TestingDesigning and validating assessment processesSecurity control testing and evaluationVulnerability assessment and penetration testingLog reviews, audits, and continuous monitoringReporting and documentation of assessment resultsDomain 7 – Security OperationsIncident response and investigation proceduresDisaster recovery and business continuity operationsLogging, monitoring, and detection strategiesResource protection, change management, and patch managementPhysical and environmental securityEvidence handling and digital forensics fundamentalsDomain 8 – Software Development SecuritySecure software development lifecycle (SDLC) practicesSecurity in development environments and methodologies (DevSecOps, Agile, Waterfall)Application security controls and secure coding standards
What you'll learn
Understanding identity and access management concepts
Designing and validating security assessment processes
Developing incident response and investigation procedures
Implementing secure software development practices