Page 223 - CISSO_Prep_ Guide

information. The information provided here is accurate at the time
of preparation but is not authoritative or necessarily accurate at
any future time.

Certified Information Systems Security Officer ( C)ISSO)

The C)ISSO certification was developed and maintained by
Mile2 (www.mile2.com) in cooperation with several governments
and militaries that wanted a certification that addressed the
complete range of information security topics. The C)ISSO is
based on many authoritative resources such as the ISO27001/2,
the NIST guidelines (www.csrc.nist.gov), the Common Criteria
ISO15408, and other leading references.
Mile2 describes the C)ISSO as: "Mile2's Certified Information
Systems Security Officer - C)ISSO - program prepares and
certifies individuals to analyze an organization's information
security infrastructure in respects to threats and risks. This course
helps you design a security program to mitigate risks relevant to
today's business environment. Certified ISSO's are proficient in
risk analysis, risk mitigation, application security, network
security, operations security, business continuity, and disaster
recovery planning."

The C)ISSO certification and examination have the following
topic areas:

Module 1: Risk Management

Module 2: Security Management
Module 3: Authentication
Module 4: Access Control

Module 5: Security Models