About Course
CyberTekie CISSP Essentials
Free training with Dr. Yemi Akere
Build confidence with selected CISSP fundamentals in approximately three hours of short video lessons. Review governance, risk analysis, security awareness, asset classification, data protection, physical controls, PKI and digital signatures, network models, secure protocols, segmentation, mandatory access control, vulnerability validation, assessments, operations, and Agile security.
Includes 18 videos, six modules, lesson notes, 18 knowledge checks, and a 12-question final review with explanations. Basic networking and information-security familiarity are recommended. This is a focused foundations and review course; use the full current ISC2 exam outline for comprehensive preparation. No exam-pass guarantee or official ISC2 affiliation is implied.
Total video duration: 02:55:28. Practice and reading take additional time.
Corrections
Read these alongside the recorded explanations. They clarify simplified descriptions and older classroom examples.
Standards and regulations
ISO/IEC 27001 is an international standard. It is not itself a law or regulation. PCI DSS is an industry standard; determine the actual contractual and legal obligations that apply.
Risk formulas
Use ARO for annualized rate of occurrence, SLE for single loss expectancy, and ALE for annualized loss expectancy. Treat numerical examples as estimates, with their assumptions documented.
Data protection
Data-at-rest or transport encryption does not automatically protect data being processed. Homomorphic encryption is a distinct technique; ordinary disk encryption and TLS do not provide that capability.
Cryptography
AES has 128-, 192-, and 256-bit keys. A generic reference to AES-512 is incorrect. Do not equate the numeric key lengths of different algorithm families.
IPsec and SSH
IPsec and SSH are separate protocol systems. IPsec is not an SSH negotiation mechanism. IKE is commonly used to negotiate IPsec security associations.
Layer models
Protocol-to-OSI mappings in introductory teaching are illustrative. Some protocols and real implementations span layers. Use the model to reason, rather than treating every chart placement as an absolute rule.
Sanitization
A fixed three-pass wipe or striking a drive with a hammer is not a universal sanitization standard. Use a media-appropriate, validated method and the current final NIST SP 800-88 guidance.
Legacy examples
Older classroom statistics, fine amounts, tool references, dates and examples are historical teaching context. Use current authoritative sources before relying on them in professional advice.
Signatures
A signature supports integrity and origin authentication. Accountability and nonrepudiation also depend on identity binding, key protection and supporting procedures.
Coverage and next study priorities
This short course samples all eight domains with uneven depth. Domain 5 and Domain 8 are introductory. The topics below are priorities for further study, not an exhaustive list of omitted objectives.
| Domain | Selected coverage | Study next |
|---|---|---|
| 1 Security and Risk Management | Governance, risk estimates, awareness | Ethics, due care and due diligence, risk treatment, personnel lifecycle, third parties, BIA and continuity planning |
| 2 Asset Security | Classification, sensitive data, lifecycle, data states | Owner and custodian responsibilities, privacy requirements, retention exceptions, media sanitization and validation |
| 3 Security Architecture and Engineering | Physical controls, asymmetric cryptography, PKI, signatures | Security models, trusted computing, symmetric cryptography, key management, cloud and virtualized systems |
| 4 Communication and Network Security | OSI reasoning, secure protocols, segmentation | Wireless security, network devices, communications attacks, resilient design and current protocol configurations |
| 5 Identity and Access Management | Mandatory access controls and authentication connections | Identity proofing, provisioning and deprovisioning, MFA, federation, SSO, RBAC and ABAC, privileged access and recertification |
| 6 Security Assessment and Testing | Vulnerability validation and audit concepts | Test strategy, evidence sufficiency, test coverage, metrics, reporting limitations and independent assurance |
| 7 Security Operations | Operational monitoring and vulnerability response | Incident lifecycle, investigations, evidence handling, backups, restoration, change management and disaster recovery exercises |
| 8 Software Development Security | Agile security introduction and Windows development context | Secure SDLC, threat modeling, code review, SAST and DAST, dependency and supply-chain controls, acquisition and security testing |
Course Content
Risk and the Human Element
-
Lesson 01: Governance and Business Alignment
09:25 -
Knowledge Check 01: Governance and Business Alignment
-
Lesson 02: Risk Analysis and Loss Expectancy
14:19 -
Knowledge Check 02: Risk Analysis and Loss Expectancy
-
Lesson 03: Security Awareness and Human Risk
08:14 -
Knowledge Check 03: Security Awareness and Human Risk
Asset and Data Security
Architecture and Cryptography
Communication and Network Security
Access Control and Security Assurance
Operations and Secure Development
Student Ratings & Reviews
