只提供英文版本

This is an ISC2 official training of Certified Information Systems Security Professional (CISSP) 2024 version.

The course content has been refreshed based on the latest new CISSP exam outline to address information security trends:

• • Cyber crimes, risks, ransomware, vulnerability management, threat intelligence, UEBA.
  • Cloud: cloud access security broker, microservices, containers.
  • Identity and access management: risk-based access control, 2FA/MFA, OIDC, Oauth, SSO, JIT, privilege escalation.
  • 5G, AI /machine learning tools.
  • Development: CI/CD, SOAR, software defined security.
  • Supply chain risk management.

Course Introduction and Objectives

CISSP is the most recognised global standard of achievement in the security industry and is found in over 135 countries.  The credential is recognised by government organisations, including

• • Hong Kong Monetary Authority (HKMA) in Enhanced Competency Framework on Cybersecurity (2019 Jan)
  • UK National Academic Recognition Information Centre (NARIC) recognised CISSP certification at RQF Level 7 Master degree standard (2020 May)
  • United States DoD 01/8570.01 approved and listed in IAT Level III, IAM Level II, IAM Level III, IASAE I and IASAE II
  • Other countries: Australia –IRAP, Cyber Skills Framework; Japan –NICT; Singapore -NICF; Thailand -ETDA

This Training Course is the official training offered by ISC2, with standard content and duration (40 hours) and conducted by experienced authorised trainers of ISC2.  The well-designed contents distributed across 8 domains assist participants to gain the latest knowledge pertinent security challenges to make a well thought out decision in security strategy.

Course Content

This content of this course is based on the current CISSP exam outline.  It has been refreshed to reflect the most pertinent issues such as supply chain attack happened in year 2024. It also covers best practices for emerging technologies (5G, IoT, cloud, container), threat intelligence and hunting.

The broad spectrum of topics included in the CISSP Common Body of Knowledge (CBK®) ensure its relevancy across all disciplines. Successful candidates are competent in the following eight domains.

Note: Effective April  15, 2024, the CISSP has a new exam outline. The domains and their weights are updated.

Course Benefits

This course will help participants review and refresh their cloud security knowledge and identify areas they need to study for the CISSP exam and features:

• • Official ISC2 courseware
  • Taught by an authorised ISC2 instructor
  • Student handbook
  • Collaboration with classmates
  • Real-world learning activities and scenarios
  • A certificate of completion

Duration

5 Days; 09:00 – 18:00

Venue

1/F, HKPC Building, 78 Tat Chee Avenue, Kowloon, Hong Kong

Medium of Instruction

Cantonese with training materials in English

Course Fee:

Early bird price (6 weeks before course start date)

• • Staff of Organiser, Member of ISC2 or Supporting Organisation: HK$17,200 per person
  • Non-member: HK$18,200 per person

Regular Price

• • Staff of Organiser, Member of ISC2 or Supporting Organisation: HK$18,500 per person
  • Non-member: HK$19,500 per person

Deadline for submission is 4 weeks before course start date. Late submission will NOT be considered.

Target Participant

This course is ideal for experienced security practitioners, managers, and executives interested in proving their knowledge across a wide array of security practices and principles.

Suitable for:

• • Chief Information Security Officer
  • Chief Information Officer
  • Director of Security
  • IT Director/Manager
  • Security Systems Engineer
  • Security Analyst
  • Security Manager
  • Security Auditor
  • Security Architect
  • Security Consultant
  • Network Architect

Trainer

Mr Bernard KAN

Bernard KAN is an ISC2 Certified Trainer with over 20 years of information security experience as a security team leader in Banking, Telecommunications industry and CERT community.

Bernard has been delivering information security training to enterprises, talks to the public in security conference and sharing sessions to NGOs and he was a frequent speaker for security awareness training. He was a part-time lecturer for City University of Hong Kong for a post-graduate Information Security certificate course for six years.

Bernard acquired several professional certifications including CISSP, GCIA, GCIH, CWSP, CCNP, MCSE and CEC. He also has a Master of Science degree in E-Commerce.

Mr Andy HO

Andy HO is an ISC2 Certified Trainer with over 30 years of information security experience in the security profession and has worked throughout the Asia Pacific countries.

Andy took the Corporate Senior Security Manager role in IBM Asia Pacific, Japan and Greater China for more than 10 years when he held the regional responsibility to oversee corporate security investigations and IT forensic.

Andy is a Council Member of (ISC)² Asia-Pacific Advisory Council and as the founding president of the (ISC)² HK Chapter.

Certificate of Training

Participants who have attained at least 80% attendance of lecture will be awarded a certificate of completion issued by The International Information System Security Certification Consortium, Inc., ISC2.

CISSP Examination Procedures

ISC2 has introduced Computerised Adaptive Testing (CAT) for all English CISSP exams worldwide. You can visit the computer-based testing partner at www.pearsonvue.com/isc2 to set up your account, schedule your exam and settle payment directly. On your scheduled exam day, you’ll have THREE hours to complete the 100 – 150 exam questions. You must pass the exam with a scaled score of 700 points or greater. For more details, please visit: https://www.isc2.org/exams.

Effective April 15, 2024, the CISSP exam will be based on a new exam outline. The domains and their weights have changed.

If you would like to understand more about the exam, kindly view the link: https://www.isc2.org/Register-for-Exam for your reference.

NITTP Training Grant Application

This course is subject to approval under the New Industrialisation and Technology Training Programme (NITTP) with up to 2/3 course fee reimbursement upon successful applications. For details: https://nittp.vtc.edu.hk.

Companies should submit their NITTP training grant application for their employee(s) via  https://nittp.vtc.edu.hk/rttp/login  at least five weeks before course commencement. Alternatively, application form could be submitted to the Secretariat in person, by post, by fax or by email to nittp@vtc.edu.hk together with supporting documents

Download Full Course  ▼