1. ISA 400 Management Information Security
Week #1
Becoming a CISSP;
Physical and Environmental Security
Philip Robbins – August 26, 2017
Information Security & Assurance Program University of Hawai'i West Oahu

2. Becoming a CISSP & Physical and Environmental Security
Topics
Introductions
Syllabus Review
Becoming a Certified Information Systems Security Professional
Topic #1: Physical & Environmental Security
Assignment #1

3. Introductions
Who am I?
Information Systems Authorizing Official Representative
Global Command & Control Information System Security Manager
United States Pacific Command (USPACOM)
Information Security Risk Management Field
Former Electronics & Environmental Engineer
Bachelor of Science in Electrical Engineering
Master of Science in Information Systems Telecom Security
Certified Information Systems Security Professional (CISSP)
Project Management Professional (PMP) 3

4. Syllabus
“Recommended” Class Textbook 4

5. Syllabus
Recommended Textbook for CISSP Exam
OUT OF PRINT 5

6. Syllabus Management Information Security What this class IS about:
A “400-level” community college management course for adequately securing our information and information systems. This class exposes the student to fundamental concepts through the CISSP CBK, and its information security domains, preparing you for a career in the field of Information Systems Security.
What this class IS NOT about:
Crash course (boot camp) for CISSP certification. 6

7. Becoming a CISSP Who is a CISSP? What’s the big deal?
CISSP v.s. College Degree v.s. Security Clearance???
v.s. “Experience” 7

8. Becoming a CISSP
What does it mean to have a CISSP? 8

9. Becoming a CISSP Professional Certifications
“The 3 Gems” according to Phil Robbins, PMP, CISSP
Cisco Certified Network Associate (CCNA)
Project Management Professional (PMP)
Certified Information Systems Security
Professional (CISSP) 9

10. Becoming a CISSP
Your Salary in relation to Professional I.T. Certifications 10

11. Becoming a CISSP
ISC2 “NEW” 8 CISSP CBK Domains 11

12. Becoming a CISSP Three Step Process Step 1: CISSP Examination
Submit Examination Application
Pay required fees ($599)
Have 5 years experience in two or more of the 8 Domains
(or 4 years experience + a college degree)
Complete Candidate Agreement
Adhere to the (ISC)2 Code of Ethics
Answer 4 questions related to criminal history and background
Take the supervised computer-based exam from (ISC)2 12

13. Becoming a CISSP Three Step Process Step 2: Certification
Congratulations! You scored 700 points or higher on your exam. You are not yet a CISSP…
Submit your Résumé.
Submit an Endorsement Form validated by another (ISC)² credential holder (CISSP).
Pass audit if randomly selected.
This process takes a couple months! 13

14. Becoming a CISSP Three Step Process Step 3: Maintenance
Annual Maintenance fee of $95
Continuing Professional Education (CPE) Credits
120 CPEs are needed every 3 years
40 CPEs per year MUST be submitted
Don’t ever let your CISSP expire! Unless you are a network engineering god (i.e. CCIE) and it’s beneath you… 14

15. Becoming a CISSP The Exam CISSP Examination Specifics 250 questions
25 questions do not count
6 hours to complete the exam
Multiple choice (4 choices)
Mixed questions (not by domain)
Questions are weighted
The (ISC)2 Code of Ethics is testable
Both a mental and physical test 15

16. Becoming a CISSP The Exam CISSP Test Taking Tips
Think like a manager. Think ISC2!!!
Think about Risk Management
Keep Confidentiality, Integrity and Availability in mind
Answer easy questions immediately, skip others and return to them later
Eliminate wrong answers
Be sure you understand what the question is asking 16

17. Becoming a CISSP The Exam CISSP Post Exam Syndrome
You will have no clue how you did until you get your results.
Many feel they are underperforming during the test.
Remember 25 questions don’t count & questions are weighted.
You will feel all questions you are getting are within a single domain. (i.e. DR / COOP) 17

18. probbins@hawaii.edu Questions? www2.hawaii.edu/~probbins 18