1. Architect for governance, compliance, and risk management

• Determine legal, regulatory, organizational and industry requirements

• Manage risk

2. Security architecture modelling

• Identify security architecture approach

• Verify and validate design (e.g., functional acceptance testing (FAT), regression)

3. Infrastructure security architecture

• Develop infrastructure security requirements

• Design defense-in-depth architecture

• Secure shared services (e.g., wireless, e-mail and voice over internet protocol (VoIP), unified communications (UC) etc.)

• Domain name system (DNS) and network time protocol (NTP)

• Integrate technical security controls

• Design and integrate infrastructure monitoring

• Design infrastructure cryptographic solutions

• Design secure network and communication infrastructure (e.g., a virtual private network (VPN), internet protocol security (IPsec), transport layer security (TLS) etc.)

• Evaluate physical and environmental security requirements

4. Identity and access management (IAM) architecture

• Design identity management and lifecycle

• Design access control management and lifecycle

• Design identity and access solutions

5. Architect for application security

• Integrate software development life cycle (SDLC) with application security architecture (e.g., requirements traceability matrix (RTM), security architecture documentation and secure coding)

• Determine application security capability requirements and strategy (e.g., open-source, cloud service providers (CSP) and software as a service (SaaS)/infrastructure as a service (IaaS)/platform as a service (PaaS) environments)

• Identify standard proactive controls for applications (e.g., Open Web Application Security Project (OWASP) and more)

6. Security operations architecture

• Gather security operations requirements (e.g., legal, compliance, organizational and business requirements)

• Design information security monitoring (e.g., security information and event management (SIEM), insider threat, threat intelligence, user behavior analytics and incident response (IR) procedures)

• Design business continuity (BC) and resiliency solutions

• Validate business continuity plan (BCP)disaster recovery plan (DRP) architecture

• Design incident response (IR) management

1. 5 day interactive instructor-led training 

2. Training provided by highly qualified, certified, and accredited trainers 

3. The CISSP-ISSAP Certification course accredited by Authorised Governing Body and Mindbel

4. Certification