Reviews 4,2
Reviews 4,5
100% fundable

Certified Information Systems Security Professional (CISSP)

Protecting digital systems means taking responsibility – for data integrity, operational continuity, and the trust of customers and partners. CISSP delivers the structured expertise that IT security professionals need today.

Key topics

  • Building governance structures, risk management frameworks, and compliance strategies.
  • Designing and evaluating security architectures for hybrid and cloud environments.
  • Applying methods to protect sensitive data, identities, and critical assets.
  • Using threat models, security controls, and vulnerability analysis in practice.
  • Planning and executing incident response, business continuity, and recovery operations.
  • Engaging with current standards, legal requirements, and international security frameworks.

Prerequisite
Professional experience in IT or information security provides the foundation – complemented by an understanding of technical systems and organizational processes.

Target group
Suited to individuals working in IT security, security architecture, auditing, consulting, or governance functions.

CISSP certification demonstrates the expertise required for strategic security decisions and effective IT protection concepts.

Course content
  • Core principles of security organization and their practical application.
  • Developing and enforcing security policies within organizations.
  • Overview of relevant legal and regulatory requirements.
  • Professional ethics and behavioral standards in information security.
  • Structuring and maintaining security-relevant documentation.
  • Identifying, assessing, and managing risks systematically.
  • Threat analysis methods and attack modeling techniques.
  • Measures for responding to security incidents and risks.
  • Key elements of effective emergency and crisis planning.
  • Security requirements in the context of mergers and acquisitions.
  • Defining security responsibilities and requirements for employees.
  • Designing and delivering security awareness and training programs.
  • Classifying and categorizing information assets by sensitivity and value.
  • Responsible handling of sensitive and business-critical data.
  • Provisioning and securing resources based on protection requirements.
  • Lifecycle management and ongoing monitoring of data inventories.
  • Requirements for secure storage of assets across environments.
  • Maintaining data integrity and ensuring ongoing availability.
  • Protective mechanisms for individual system components and architectures.
  • Security models for systematic risk analysis and evaluation.
  • Selecting and implementing appropriate security measures and controls.
  • Deepening expertise in information security engineering principles.
  • Strategies for reducing and managing technical vulnerabilities.
  • Addressing security risks in modern and legacy technology environments.
  • Foundational understanding of cryptographic concepts and algorithms.
  • Practical application of cryptographic methods in IT systems.
  • Detecting and defending against cryptographic attacks.
  • Designing physically secure sites and operational environments.
  • Implementing physical security measures in buildings and data centers.
  • Analyzing and securing network protocols against known attack vectors.
  • Hardening and protecting network hardware and infrastructure components.
  • Securing communication channels and data transmission paths.
  • Detecting and defending against network-based attacks.
  • Physical and logical access control in enterprise environments.
  • Authentication and identification methods and their practical application.
  • Identity-as-a-Service concepts and deployment scenarios.
  • Technical mechanisms for managing and monitoring access rights.
  • Protecting identity and access systems against targeted attacks.
  • Evaluating and validating existing security controls.
  • Testing software security mechanisms and interfaces.
  • Gathering and analyzing security-relevant data and metrics.
  • Planning and conducting internal and external security audits.
  • Managing and documenting change processes in IT systems.
  • Securing physical infrastructure and server environments.
  • Protecting personnel and employee security-related data.
  • Prevention and internal investigation of security incidents.
  • Patch management and structured vulnerability remediation.
  • Continuous logging and monitoring of systems and networks.
  • Building and executing incident response processes.
  • Forensic investigation methods and digital evidence handling.
  • Developing and documenting disaster recovery plans.
  • Strategies for restoring operations after outages and disasters.
  • Operational execution of business continuity measures.
  • Applying security principles across the full system and product lifecycle.
  • Integrating security requirements into software development workflows.
  • Securing development environments and build pipelines.
  • Protecting databases and data access in software projects.
  • Evaluating the effectiveness of implemented security mechanisms.

Up to 100% funding for your continuing education

Attractive funding opportunities are available for numerous continuing education programs – depending on the funding program, up to 100% funding is possible.
The requirement is that you live or work in Germany. Our funding opportunities are not available outside of Germany.

Funding opportunities are available for career starters, job seekers, career changers, startups, experienced professionals, those seeking career advancement, and specialists.

Frequently asked questions

  • CISSP is a globally recognized certification in information security – demonstrating deep competence in cybersecurity, risk management, and governance.
  • Information security professionals, IT architects, consultants, and governance specialists use CISSP to demonstrate and advance their qualifications strategically.
  • The CISSP curriculum spans eight domains – from governance and risk management to network and software security, legal foundations, and security operations.
  • Several years of professional experience across at least two CISSP domains is required. Without this, entry as a CISSP Associate is the alternative path.
  • The certification is built on established international security standards and serves as a trusted proof of quality for enterprises, government agencies, and global organizations.
  • With CISSP, professionals gain greater visibility and career opportunities – particularly in senior security roles, government positions, and internationally active organizations.
  • Yes – as cyber threats grow and compliance requirements increase, the demand for well-qualified security professionals remains consistently high.

Your Personal Path to the Right Continuing Education Program—We Provide Personalized Guidance

Our experienced educational advisors will guide you from your very first question all the way to the start of your continuing education program.