CISSP Certified Information Systems Security Professional

Updated in May 2025. This course now features Coursera Coach! A smarter way to learn with interactive, real-time conversations that help you test your knowledge, challenge assumptions, and deepen your understanding as you progress through the course. This course delves into the intricate aspects of asset security, providing IT professionals with essential knowledge aligned with the CISSP curriculum. It begins by exploring asset and data classification, helping you understand the importance of categorizing organizational resources based on sensitivity and value. From there, you'll learn about data and asset handling procedures, focusing on secure provisioning and management practices to ensure that organizational assets are protected throughout their lifecycle. The course takes a deep dive into the phases of the data lifecycle, explaining how to manage data from creation to disposal. You’ll explore critical topics such as data roles, asset retention, and security implications for data states—whether at rest, in transit, or in use. Practical discussions on asset management and data protection methods like Digital Rights Management (DRM), Data Loss Prevention (DLP), and Cloud Access Security Brokers (CASB) equip you with the tools to safeguard data efficiently. By the end of the course, you will have a solid understanding of scoping and tailoring security controls, selecting the right standards for your organization, and applying cutting-edge data protection methods. This course prepares you for the CISSP exam while offering real-world applications to enhance your role as an information security professional. This course is designed for IT and cybersecurity professionals preparing for the CISSP certification, particularly those interested in learning how to secure organizational assets and data. A basic understanding of information security is recommended.

Updated in May 2025. This course now features Coursera Coach! A smarter way to learn with interactive, real-time conversations that help you test your knowledge, challenge assumptions, and deepen your understanding as you progress through the course. In this course, you will dive into the complexities of communication and network security, aligned with the latest CISSP curriculum. You will start by exploring key networking models such as the OSI and TCP/IP, understanding how different layers contribute to secure data transmission. Through examining network transmission media and transport technologies, you will learn how to mitigate risks associated with both wired and wireless environments. As the course progresses, you will gain a deeper understanding of network security architectures and advanced technologies. Topics such as encryption, endpoint security, and secure protocols will be discussed in detail, offering you the skills to design secure communication systems. You’ll also explore network performance metrics, data flows, and vulnerabilities in modern networks, including those found in cloud environments, Virtual Private Clouds (VPCs), and software-defined networking (SDN). Finally, you’ll explore physical and logical network segmentation techniques, as well as the implementation of secure wireless and remote access technologies. The course covers critical networking concepts like IPv4 and IPv6 addressing, micro-segmentation, and edge networks, ensuring you can apply secure networking solutions in diverse environments. By the end of the course, you will be equipped to secure both physical and virtual networks, preparing you for the CISSP exam and advancing your career in cybersecurity. This course is designed for IT professionals, network engineers, and security architects preparing for the CISSP exam or seeking to strengthen their understanding of communication and network security. Basic networking knowledge is recommended.

Updated in May 2025. This course now features Coursera Coach! A smarter way to learn with interactive, real-time conversations that help you test your knowledge, challenge assumptions, and deepen your understanding as you progress through the course. In this detailed course on Identity and Access Management (IAM), you will explore the full spectrum of identity controls and management practices essential for today’s IT environments. Beginning with an overview of physical and logical access control methods, you’ll learn how to secure key organizational assets. The course progresses into the types of access controls, focusing on role-based and rule-based models, as well as advanced access control mechanisms like Attribute-Based Access Control (ABAC) and Risk-Based Access Control. Key IAM concepts like authentication, authorization, and accounting (AAA) are thoroughly discussed, emphasizing their importance in modern security architectures. You'll also learn how to manage sessions, perform identity registration, and implement Federated Identity Management (FIM) for cross-domain environments. The course also covers credential management techniques like password vaults, Single Sign-On (SSO), and Just-in-Time access, ensuring you can manage identities securely and efficiently. By the end of the course, you will be equipped to handle identity lifecycle processes such as provisioning, deprovisioning, account access reviews, and role definitions. Additionally, protocols like OAuth, OpenID, SAML, Kerberos, RADIUS, and TACACS+ are explained in depth, giving you a strong understanding of authentication systems. This course prepares you not only for the CISSP exam but also for the real-world challenges of managing identity and access in complex IT environments. This course is ideal for IT professionals, security managers, and network administrators preparing for CISSP certification or seeking to strengthen their expertise in Identity and Access Management (IAM). A basic understanding of information security and networking is recommended.

This comprehensive course on Secure Software Development is designed to help IT professionals integrate security at every stage of the Software Development Life Cycle (SDLC), following the CISSP curriculum. The course starts with an introduction to security considerations in software development and how to choose the appropriate development methodology, including process-driven and agile-based approaches. You’ll explore the use of security controls, risk analysis, and methodologies such as the Capability Maturity Model (CMM) and Software Assurance Maturity Model (SAMM) to enhance the security of your development processes. As the course progresses, you’ll dive into secure coding practices, exploring how to minimize programming language risks, use secure development tools, and manage post-deployment software expectations. You’ll learn how to conduct application security testing, manage software configuration, and implement auditing and logging processes to ensure security throughout the software lifecycle. Real-world scenarios will illustrate the critical role of Integrated Product Teams (IPTs) in improving communication, decision-making, and overall software quality. In addition, you’ll examine the security of APIs, cloud services, third-party software, and open-source solutions, learning how to assess and mitigate risks associated with these components. By the end of the course, you’ll have a strong understanding of how to develop, deploy, and maintain secure software, ensuring both compliance and security in modern IT environments. This course is also an excellent preparation for the CISSP certification. This course is designed for software developers, security professionals, and IT managers preparing for the CISSP certification or aiming to integrate security into software development practices. A basic understanding of software development methodologies is recommended.

This in-depth course on Security Architecture and Engineering aligns with the latest CISSP curriculum and is designed to enhance your expertise in building and securing IT environments. You'll start by exploring secure design principles and key security models like Bell-LaPadula, Biba, and Clark-Wilson, giving you a strong foundation in designing secure systems. From there, you’ll delve into security control implementation, memory protection, and encryption techniques, ensuring you understand how to protect both data in motion and at rest. The course also covers system-specific vulnerabilities, including those found in client-server, database, cloud, and IoT systems. You'll learn how to assess and mitigate risks associated with virtualization, containerization, and distributed microservices, as well as how to secure industrial control systems and high-performance computing environments. Through real-world examples, you'll develop practical skills to protect systems from both internal and external threats. Finally, the course explores cryptography fundamentals, Public Key Infrastructure (PKI), digital signatures, and classic cryptanalytic attacks. Physical security principles are also discussed, including site design, natural access controls, and the implementation of security measures for facilities. By the end, you’ll be equipped to implement comprehensive security architectures that protect both digital assets and physical sites, while also being fully prepared for the CISSP exam. This course is ideal for IT professionals, security architects, and system engineers preparing for the CISSP certification or seeking to enhance their knowledge of security architecture and engineering. A basic understanding of information security is recommended.

Updated in May 2025. This course now features Coursera Coach! A smarter way to learn with interactive, real-time conversations that help you test your knowledge, challenge assumptions, and deepen your understanding as you progress through the course. In this comprehensive course, you will explore the critical elements of security assessment and testing, aligned with the CISSP curriculum. The course begins with an introduction to designing and validating security tests and assessments, focusing on key strategies that ensure thorough evaluation of organizational security. You'll dive into vulnerability assessments, learning how to identify potential weaknesses in systems and infrastructure, and how to mitigate risks effectively. As the course progresses, you'll explore the world of penetration testing, understanding the different types of tests such as white-box and black-box testing, and the roles of red, blue, and purple teams in simulating attacks. You’ll also learn about other common security tests used to evaluate an organization’s security posture. The course provides a solid foundation in collecting and analyzing security process data, helping you make informed decisions based on technical and administrative data from your organization. Finally, the course covers the intricacies of conducting security audits, whether internal, external, or third-party. By the end of the course, you will be well-prepared to perform comprehensive security assessments, interpret test results, and implement improvements, ensuring that your organization’s security is robust and up-to-date. This course also prepares you for the CISSP certification exam by covering essential topics related to security testing and assessment. This course is ideal for IT professionals, security testers, and auditors preparing for the CISSP certification or seeking to enhance their skills in security assessment and testing. Basic knowledge of information security and testing methodologies is recommended.

Updated in May 2025. This course now features Coursera Coach! A smarter way to learn with interactive, real-time conversations that help you test your knowledge, challenge assumptions, and deepen your understanding as you progress through the course. In this comprehensive course on Security Operations, you will gain the skills necessary to manage and secure ongoing operations within an organization, aligned with the latest CISSP curriculum. You will start by exploring the fundamentals of operational security, including forensic investigation standards, logging, and monitoring activities. You'll dive into the importance of Configuration Management (CM) and the use of logging tools like IDPS, SIEM, and SOAR to detect and prevent security threats. The course also covers essential topics such as incident management, detection, and preventive measures, ensuring you can handle and respond to security breaches effectively. You'll learn how to apply media protection methods, manage patches, and implement change management processes that help reduce vulnerabilities in your IT environment. The focus on recovery strategies will teach you how to maintain business continuity during disruptions, while disaster recovery planning ensures your organization is prepared for any major incident. Physical security and personnel safety are key components of operational security, and this course provides detailed insights into the methods and controls used to protect both digital and physical assets. You’ll explore contingency planning and continuity strategies, ensuring you are ready to implement resilient security operations in your organization. By the end of this course, you will have a comprehensive understanding of security operations, ensuring success in the CISSP exam and real-world cybersecurity environments. This course is designed for IT professionals, security managers, and incident response teams preparing for the CISSP certification or seeking to enhance their expertise in Security Operations. A basic understanding of cybersecurity principles is recommended.