ISA 400 Management Information Security Week #1 Becoming a CISSP; Physical and Environmental Security Philip Robbins – August 26, 2017 Information Security & Assurance Program University of Hawai'i West Oahu

Becoming a CISSP & Physical and Environmental Security Topics Introductions Syllabus Review Becoming a Certified Information Systems Security Professional Topic #1: Physical & Environmental Security Assignment #1

Introductions Who am I? Information Systems Authorizing Official Representative Global Command & Control Information System Security Manager United States Pacific Command (USPACOM) Information Security Risk Management Field Former Electronics & Environmental Engineer Bachelor of Science in Electrical Engineering Master of Science in Information Systems Telecom Security Certified Information Systems Security Professional (CISSP) Project Management Professional (PMP) 3

Syllabus “Recommended” Class Textbook 4

Syllabus Recommended Textbook for CISSP Exam OUT OF PRINT 5

Syllabus Management Information Security What this class IS about: A “400-level” community college management course for adequately securing our information and information systems. This class exposes the student to fundamental concepts through the CISSP CBK, and its information security domains, preparing you for a career in the field of Information Systems Security. What this class IS NOT about: Crash course (boot camp) for CISSP certification. 6

Becoming a CISSP Who is a CISSP? What’s the big deal? CISSP v.s. College Degree v.s. Security Clearance??? v.s. “Experience” 7

Becoming a CISSP What does it mean to have a CISSP? 8

Becoming a CISSP Professional Certifications “The 3 Gems” according to Phil Robbins, PMP, CISSP Cisco Certified Network Associate (CCNA) Project Management Professional (PMP) Certified Information Systems Security Professional (CISSP) 9

Becoming a CISSP Your Salary in relation to Professional I.T. Certifications 10

Becoming a CISSP ISC2 “NEW” 8 CISSP CBK Domains 11

Becoming a CISSP Three Step Process Step 1: CISSP Examination Submit Examination Application Pay required fees ($599) Have 5 years experience in two or more of the 8 Domains (or 4 years experience + a college degree) Complete Candidate Agreement Adhere to the (ISC)2 Code of Ethics Answer 4 questions related to criminal history and background Take the supervised computer-based exam from (ISC)2 12

Becoming a CISSP Three Step Process Step 2: Certification Congratulations! You scored 700 points or higher on your exam. You are not yet a CISSP… Submit your Résumé. Submit an Endorsement Form validated by another (ISC)² credential holder (CISSP). Pass audit if randomly selected. This process takes a couple months! 13

Becoming a CISSP Three Step Process Step 3: Maintenance Annual Maintenance fee of $95 Continuing Professional Education (CPE) Credits 120 CPEs are needed every 3 years 40 CPEs per year MUST be submitted Don’t ever let your CISSP expire! Unless you are a network engineering god (i.e. CCIE) and it’s beneath you… 14

Becoming a CISSP The Exam CISSP Examination Specifics 250 questions 25 questions do not count 6 hours to complete the exam Multiple choice (4 choices) Mixed questions (not by domain) Questions are weighted The (ISC)2 Code of Ethics is testable Both a mental and physical test 15

Becoming a CISSP The Exam CISSP Test Taking Tips Think like a manager. Think ISC2!!! Think about Risk Management Keep Confidentiality, Integrity and Availability in mind Answer easy questions immediately, skip others and return to them later Eliminate wrong answers Be sure you understand what the question is asking 16

Becoming a CISSP The Exam CISSP Post Exam Syndrome You will have no clue how you did until you get your results. Many feel they are underperforming during the test. Remember 25 questions don’t count & questions are weighted. You will feel all questions you are getting are within a single domain. (i.e. DR / COOP) 17

probbins@hawaii.edu Questions? www2.hawaii.edu/~probbins http://www.dorkatron.com/docs/ISA400.FA17/ 18