CyberTekie CISSP Essentials

Categories: Certification Prep
Wishlist Share

About Course

CyberTekie CISSP Essentials
Free training with Dr. Yemi Akere

Build confidence with selected CISSP fundamentals in approximately three hours of short video lessons. Review governance, risk analysis, security awareness, asset classification, data protection, physical controls, PKI and digital signatures, network models, secure protocols, segmentation, mandatory access control, vulnerability validation, assessments, operations, and Agile security.

Includes 18 videos, six modules, lesson notes, 18 knowledge checks, and a 12-question final review with explanations. Basic networking and information-security familiarity are recommended. This is a focused foundations and review course; use the full current ISC2 exam outline for comprehensive preparation. No exam-pass guarantee or official ISC2 affiliation is implied.

Total video duration: 02:55:28. Practice and reading take additional time.

Corrections

Read these alongside the recorded explanations. They clarify simplified descriptions and older classroom examples.

Standards and regulations

ISO/IEC 27001 is an international standard. It is not itself a law or regulation. PCI DSS is an industry standard; determine the actual contractual and legal obligations that apply.

Risk formulas

Use ARO for annualized rate of occurrence, SLE for single loss expectancy, and ALE for annualized loss expectancy. Treat numerical examples as estimates, with their assumptions documented.

Data protection

Data-at-rest or transport encryption does not automatically protect data being processed. Homomorphic encryption is a distinct technique; ordinary disk encryption and TLS do not provide that capability.

Cryptography

AES has 128-, 192-, and 256-bit keys. A generic reference to AES-512 is incorrect. Do not equate the numeric key lengths of different algorithm families.

IPsec and SSH

IPsec and SSH are separate protocol systems. IPsec is not an SSH negotiation mechanism. IKE is commonly used to negotiate IPsec security associations.

Layer models

Protocol-to-OSI mappings in introductory teaching are illustrative. Some protocols and real implementations span layers. Use the model to reason, rather than treating every chart placement as an absolute rule.

Sanitization

A fixed three-pass wipe or striking a drive with a hammer is not a universal sanitization standard. Use a media-appropriate, validated method and the current final NIST SP 800-88 guidance.

Legacy examples

Older classroom statistics, fine amounts, tool references, dates and examples are historical teaching context. Use current authoritative sources before relying on them in professional advice.

Signatures

A signature supports integrity and origin authentication. Accountability and nonrepudiation also depend on identity binding, key protection and supporting procedures.

Coverage and next study priorities

This short course samples all eight domains with uneven depth. Domain 5 and Domain 8 are introductory. The topics below are priorities for further study, not an exhaustive list of omitted objectives.

Domain Selected coverage Study next
1 Security and Risk Management Governance, risk estimates, awareness Ethics, due care and due diligence, risk treatment, personnel lifecycle, third parties, BIA and continuity planning
2 Asset Security Classification, sensitive data, lifecycle, data states Owner and custodian responsibilities, privacy requirements, retention exceptions, media sanitization and validation
3 Security Architecture and Engineering Physical controls, asymmetric cryptography, PKI, signatures Security models, trusted computing, symmetric cryptography, key management, cloud and virtualized systems
4 Communication and Network Security OSI reasoning, secure protocols, segmentation Wireless security, network devices, communications attacks, resilient design and current protocol configurations
5 Identity and Access Management Mandatory access controls and authentication connections Identity proofing, provisioning and deprovisioning, MFA, federation, SSO, RBAC and ABAC, privileged access and recertification
6 Security Assessment and Testing Vulnerability validation and audit concepts Test strategy, evidence sufficiency, test coverage, metrics, reporting limitations and independent assurance
7 Security Operations Operational monitoring and vulnerability response Incident lifecycle, investigations, evidence handling, backups, restoration, change management and disaster recovery exercises
8 Software Development Security Agile security introduction and Windows development context Secure SDLC, threat modeling, code review, SAST and DAST, dependency and supply-chain controls, acquisition and security testing
Show More

What Will You Learn?

  • Explain how policies, accountability, and governance connect security to organizational goals.
  • Distinguish qualitative analysis from quantitative estimates and calculate SLE and ALE.
  • Choose role-based awareness activities and meaningful measures of improvement.
  • Connect information classification and sensitivity to proportionate protection.
  • Apply collection, use, retention, and disposal decisions across the data lifecycle.
  • Choose safeguards based on the data state and the threat being addressed.
  • Classify physical protection controls and connect them to safety and business requirements.
  • Explain the roles of a CA, registration authority, certificate, and private key.
  • Distinguish signature verification from encryption and understand its assurance limits.
  • Use network layers to reason about protocol behavior and control placement.
  • Compare IPsec transport and tunnel modes and recognize the role of TLS and SSH.
  • Explain how segmentation reduces exposure and limits unnecessary traffic.
  • Distinguish policy-enforced access controls from discretionary permissions using Linux examples.
  • Validate findings and choose remediation or mitigation based on business risk.
  • Explain why assessment evidence, scope, and independence affect assurance.
  • Connect daily monitoring, response, and vulnerability work to operational resilience.
  • Explain why iterative delivery still needs explicit security requirements and verification.
  • Connect development choices, change control, and operational security.

Course Content

Risk and the Human Element

  • Lesson 01: Governance and Business Alignment
    09:25
  • Knowledge Check 01: Governance and Business Alignment
  • Lesson 02: Risk Analysis and Loss Expectancy
    14:19
  • Knowledge Check 02: Risk Analysis and Loss Expectancy
  • Lesson 03: Security Awareness and Human Risk
    08:14
  • Knowledge Check 03: Security Awareness and Human Risk

Asset and Data Security

Architecture and Cryptography

Communication and Network Security

Access Control and Security Assurance

Operations and Secure Development

Student Ratings & Reviews

No Review Yet
No Review Yet