Bristol, United Kingdom

IT Security and Governance

Certified Information Systems Security Professional (CISSP)in Bristol

40 Hours / 5 DaysLive virtual trainingAdvanced

Classroom training and venue arrangements depend on the availability of a suitable conference hall in Bristol, United Kingdom. Dates, seating capacity, facilities and the final venue are confirmed before booking.

Learning in Bristol, United Kingdom

City details

Bristol offers a strong professional community, cultural heritage and accessible learning opportunities.

City speciality

Business, education and cultural heritage

Classroom availability and venue

Build your understanding

Explore Certified Information Systems Security Professional (CISSP)

CISSP Certification Training in Bristol, United Kingdom helps experienced IT and cybersecurity professionals develop advanced expertise in security and risk management, asset security, network security, identity and access management, security operations, and security architecture. This CISSP Course from StepMerit Learning provides structured, exam-focused learning aligned with ISC2 CISSP domains, supporting professionals pursuing advanced information security roles and certification.

View the complete course information

Your learning location

Learning from Bristol

Bristol offers a strong professional community, cultural heritage and accessible learning opportunities.

Make your learning count

City-page course benefits

Develop Advanced Cybersecurity Expertise
Build advanced knowledge across security and risk management, asset security, network security, IAM, security operations, and security architecture through CISSP Training in Bristol, United Kingdom.
Prepare for CISSP Certification
Gain structured, exam-focused learning aligned with the eight CISSP domains to support preparation for the internationally recognized CISSP certification.
Strengthen Information Security Leadership Skills
Develop security management knowledge that can help experienced professionals contribute to cybersecurity strategy, governance, risk management, and organizational security programs.
Expand Senior Cybersecurity Career Opportunities
CISSP knowledge can support career development toward roles such as Security Manager, Security Architect, Information Security Manager, Security Consultant, and Cybersecurity Leader.
Build Risk Management Capabilities
Learn how to identify, assess, and manage information security risks while understanding governance, compliance, business continuity, and security policies.
Enhance Enterprise Security Knowledge
Develop a broader understanding of enterprise security architecture, network protection, identity management, security operations, and secure technology implementation.
Strengthen Professional Credibility
Preparing for the CISSP certification can help experienced security professionals demonstrate broad knowledge of information security practices to employers in Bristol, United Kingdom.
Support Continuous Cybersecurity Career Development
Use CISSP knowledge as a foundation for ongoing professional growth in security architecture, governance, risk, compliance, cloud security, and cybersecurity management.

Course curriculum

Module 1: Security and Risk Management
- Security concepts, principles, and professional ethics
- Security governance, policies, standards, and procedures
- Risk management, risk assessment, and risk treatment
- Legal, regulatory, privacy, and compliance requirements
- Business continuity, threat modeling, and supply chain risk management
- Security awareness, education, and training programs
Module 2: Asset Security
- Information and asset identification and classification
- Data ownership, asset ownership, and handling requirements
- Secure provisioning and asset management
- Data lifecycle management and data retention
- Data destruction and data remanence
- Data security controls and protection requirements
- Data protection across data at rest, in transit, and in use
Module 3: Security Architecture and Engineering
- Secure design principles and security engineering processes
- Security models and architecture concepts
- Security controls and system security requirements
- Hardware, firmware, virtualization, and embedded system security
- Cloud, IoT, container, serverless, and distributed system security
- Cryptographic concepts, encryption, PKI, and key management
- Physical security and facility protection
- Information system lifecycle and secure architecture management
Module 4: Communication and Network Security
- Secure network architecture and design principles
- OSI and TCP/IP models and secure networking concepts
- IPv4, IPv6, and secure communication protocols
- Network segmentation, micro-segmentation, and Zero Trust concepts
- VPN, IPSec, SSH, TLS, wireless, cellular, and remote access security
- Network Access Control (NAC) and endpoint security
- Secure communication channels and third-party connectivity
- Network monitoring, management, and security controls
Module 5: Identity and Access Management (IAM)
- Physical and logical access control concepts
- Identity management, authentication, and authorization
- Multi-factor authentication (MFA) and passwordless authentication
- Single Sign-On (SSO) and federated identity management
- Role-Based Access Control (RBAC), ABAC, MAC, and DAC
- Identity and access provisioning and deprovisioning
- Privileged account and service account management
- Access reviews and identity lifecycle management
Module 6: Security Assessment and Testing
- Security assessment, audit, and testing strategies
- Vulnerability assessments and penetration testing
- Security control testing and validation
- Log reviews, code reviews, and security testing techniques
- Security metrics, KPIs, and risk indicators
- Security assessment data collection and analysis
- Remediation, exception handling, and ethical disclosure
- Internal, external, and third-party security audits
Module 7: Security Operations
- Security operations principles and operational processes
- Security logging, monitoring, and SIEM concepts
- Threat intelligence and threat hunting
- Incident response and incident management
- Digital forensics and evidence collection
- Configuration management and change management
- Disaster recovery and business continuity operations
- Backup, recovery, resilience, and high availability
- Physical security and personnel safety
- Security operations automation and continuous monitoring
Module 8: Software Development Security
- Security throughout the Software Development Life Cycle (SDLC)
- Secure software development methodologies
- Agile, DevOps, and DevSecOps security practices
- Software security controls and development ecosystems
- Secure code repositories, libraries, tools, and CI/CD pipelines
- Application security testing including SAST and DAST
- Software vulnerability assessment and risk mitigation
- Third-party, open-source, commercial, and cloud software security
- Secure coding guidelines and application security principles
Module 9: CISSP Exam Preparation and Practice
- Comprehensive review of all eight CISSP domains
- Scenario-based cybersecurity questions
- Risk management and security decision-making scenarios
- Practice questions covering technical and managerial concepts
- Mock examination and performance analysis
- Identification of knowledge gaps and targeted revision
- Exam strategy, time management, and question analysis
- Final preparation for the CISSP Computerized Adaptive Testing (CAT) examination

Exam details

Certification: Certified Information Systems Security Professional (CISSP)
Certification Body: ISC2
Exam Delivery: Computerized Adaptive Testing (CAT)
Number of Questions: 100–150 items
Exam Duration: Up to 3 hours
Question Format: Multiple-choice and advanced item types, including scenario-oriented questions
Passing Score: 700 out of 1,000
Exam Languages: English, Chinese, German, Japanese, and Spanish
Testing Location: ISC2-authorized Pearson Testing Centers
CISSP Experience Requirement

Candidates generally need five years of cumulative full-time work experience in at least two of the eight CISSP domains. Certain approved credentials or a relevant degree may satisfy up to one year of the experience requirement. Candidates without the required experience may pursue the Associate of ISC2 pathway after passing the examination.

Plan your learning

Who this course is for

Experienced IT Professionals Cybersecurity Professionals Security and Risk Management Professionals Security Architects and Engineers Network and Infrastructure Professionals Identity and Access Management Professionals Security Operations Professionals Security Assessment and Audit Professionals IT Managers and Security Managers Cybersecurity Consultants Professionals Preparing for CISSP Certification Professionals Seeking Advanced Cybersecurity Knowledge

Before you begin

Professional Information Security Experience CISSP is designed for experienced cybersecurity and information security professionals. ISC2 requires five years of cumulative full-time work experience in at least two of the eight CISSP domains for certification. Relevant IT and Cybersecurity Background Candidates should ideally have professional knowledge of information security, networking, risk management, security operations, identity management, or related IT areas before undertaking CISSP Training in Bristol, United Kingdom. Educational Experience A bachelor's or master's degree in computer science, information technology, or a related field can satisfy up to one year of the required…

Learning outcomes

Problem Statement Insurance organizations manage sensitive customer, policy, claims, and financial data that require strong cybersecurity and risk controls. How We Overcame the Problem Learners applied CISSP security principles to protect insurance systems, data, identities, applications, and infrastructure. Overall Implementation Learners implemented security practices covering risk management, access control, network security, data protection, incident response, and governance. Evidence of Learning Learners demonstrated skills in identifying risks, applying security controls, managing access, protecting data, and responding to security incidents. Insurance Security Workflow Risk…

Prefer a course discussion? Schedule a meeting

Room facilities / classroom arrangements

General planning information. Availability is confirmed for your selected venue and batch.

Typical classroom arrangements — subject to confirmation for the selected batch: 1. Learning space and seating: A suitable room layout with seating and desk space for course discussions and exercises. 2. Presentation equipment: A display or projector for instructor-led explanations; equipment requirements are confirmed before delivery. 3. Internet and power: Connectivity and charging access where needed for the course’s digital resources or labs. 4. Collaboration tools: A whiteboard or flip chart for group activities, demonstrations and note-taking. 5. Room comfort: Appropriate lighting and ventilation, with breaks included in the agreed training schedule. 6. Access and learner needs: Accessibility, refreshments and any specific accommodation requirements should be discussed with the adviser in advance. This is general planning information. It does not confirm a particular venue, equipment package or included refreshments.

Course expertise

10+ Years of Cybersecurity & Information Security Experience 2,500+ Hours of Professional Training Delivered 1,500+ Professionals Trained 150+ Corporate & Professional Training Sessions 100+ Practical Security Labs & Case Studies 750+ Hours of CISSP & Information Security Training 250+ Security Architecture, Risk & Governance Exercises 10+ Industry Sectors Covered Through Training

Continue exploring

Insights for Certified Information Systems Security Professional (CISSP)

Learning insight 01

CISSP (Certified Information Systems Security Professional): Complete Guide to Certification, Exam & Career

The CISSP (Certified Information Systems Security Professional) is a globally recognized information security certification offered by ISC2 . It is designed for experienced cybersecurity professionals who want to demonstrate knowledge across technical and managerial aspects of information security. CISSP covers a broad…

Read the full article

Learning insight 02

CISSP-ISSAP Certification: Complete Guide to Information Systems Security Architecture, Exam, and Career Opportunities

Modern organisations rely on complex IT infrastructures, cloud platforms, enterprise applications, and interconnected networks to manage critical business operations. As cyber threats become more sophisticated, organisations need security professionals who can design resilient security architectures, manage enterprise…

Read the full article

Learning insight 03

Certified in Risk and Information Systems Control (CRISC) Certification: Complete Guide to Exam, Benefits, and Career Opportunities

Organizations increasingly depend on digital platforms, cloud services, payment systems, customer databases, and interconnected business applications to manage their operations. In sectors such as e-commerce and retail, technology risks can affect online transactions, inventory accuracy, customer privacy, supply chain…

Read the full article

Explore this course locally

London Manchester Birmingham Leeds