Security Architecture and Engineering

CISSP Domain 3 in depth: threat modeling, least privilege, defense in depth, zero trust and privacy by design, Bell-LaPadula, Biba, Clark-Wilson and Brewer-Nash, Common Criteria, NIAP, CMVP, the NIST RMF and FedRAMP, the TCB, TPMs and HSMs, vulnerabilities from databases and industrial control to cloud, containers and IoT, symmetric and asymmetric cryptography, hashing, signatures and PKI with shrinking certificate lifetimes, cryptanalysis and the post-quantum transition under NSM-10, CNSA 2.0 and FIPS 203, 204 and 205, CPTED and layered physical security, facility controls for cooling, fire and power, and a capstone architecture review.

CISSP-112 12 lessons · 5 h 33 min

Offered by HSM University · CISSP Exam Prep

This is the American version of this course. See the Canadian version.

What you'll learn

Apply threat modeling, least privilege, defense in depth, secure defaults, fail-secure behavior and separation of duties to system designs
Design with zero trust, privacy by design, trust but verify and shared responsibility, and plan staged adoption of zero trust architecture
Explain and compare Bell-LaPadula, Biba, Clark-Wilson, Brewer-Nash and other security models and select the model that fits a requirement
Select controls from security requirements and evaluate products and systems using Common Criteria, validation programs and authorization processes
Describe the trusted computing base, reference monitor, memory protection, secure boot, TPMs and HSMs and the assurance each provides
Assess and mitigate vulnerabilities in clients, servers, databases, distributed systems and industrial control systems
Assess and mitigate vulnerabilities in cloud services, virtualization, containers, serverless, IoT, embedded and edge systems
Select symmetric and asymmetric algorithms and key sizes, design hybrid encryption and manage the cryptographic life cycle
Apply hashing, digital signatures, public key infrastructure, certificate life cycles and key management to protect integrity and trust
Recognize cryptanalytic attacks and plan a migration to post-quantum cryptography using current standards and government timelines
Apply site selection, CPTED and layered physical controls that deter, detect, delay and allow response while protecting life safety
Design facility controls for server rooms, media storage, environment, fire and power, and conduct a prioritized security architecture review

Course content

12 lessons · 5 h 33 min total · final exam

1 Secure design principles I: threat modeling, least privilege and defense in depth 29 min · quiz
2 Secure design principles II: zero trust, privacy by design and shared responsibility 28 min · quiz
3 Security models: Bell-LaPadula, Biba, Clark-Wilson, Brewer-Nash and others 27 min · quiz
4 Selecting controls and evaluating systems: requirements, Common Criteria and authorization in the US 27 min · quiz
5 Security capabilities of information systems: the TCB, memory protection, TPMs and HSMs 27 min · quiz
6 Assessing and mitigating vulnerabilities I: clients, servers, databases, distributed systems and industrial control 27 min · quiz
7 Assessing and mitigating vulnerabilities II: cloud, virtualization, containers, IoT, embedded and edge 26 min · quiz
8 Cryptography I: symmetric and asymmetric encryption and the cryptographic life cycle 28 min · quiz
9 Cryptography II: hashing, digital signatures, public key infrastructure and key management 27 min · quiz
10 Cryptanalytic attacks and the move to post-quantum cryptography in the US 28 min · quiz
11 Site and facility design: site selection, CPTED and layered physical security 27 min · quiz
12 Facility controls and capstone: server rooms, environment, fire, power and an architecture review 32 min · quiz
E Final exam 20 questions

Requirements

CISSP-101 How the CISSP Works

Recommended background. You can start any course at any time.