Certified Information Security Consultant™

The Certified Information Security Consultant is a program designed to make you an expert consultant in the domain of information security. While most certification programs are geared towards purely technical know-how, the CISC also arms you with the necessary consulting skills in order to help you make your mark in this exciting field. The best part about the CISC is the fact that you get hands-on practical training on live projects. It covers a wide variety of topics, starting right from the basics, and then leading up to compliance standards, and even forensics and cyber crime investigations.

Why should you attend this course?

The CISC is the only completely hands-on, real-world oriented security certification. It is a course designed by security professionals, and for security professionals. You get personally mentored by the best in the business. Check out the profiles of our team members to know more about your mentors. This is a group of people who have worked on prestigious international projects, presented at the leading security conferences around the world, and written numerous books and articles.

The CISC has been designed by security expert, K. K. Mookhey, who brings almost a decade of information security experience, and consulting experience with clients such as the United Nations, World Customs Organization, Atos Origin, State Bank of India, Dubai Stock Exchange, Saudi Telecom, and numerous others. He is a well-known trainer and has also presented at numerous security conferences, including Blackhat, Interop, and IT Underground. He is also the other of two books on information security, and numerous articles.

How does the CISC work?

The CISC is an 16 day (8 weekends) training program, which comprehensively covers all the main aspects of information security. Our mentors are available to help you clear up concepts, discuss technical issues, and take you through the entire courseware. After the CISC you have the option of signing up for a 1 month intensive hands-on internship program, which will help you get the practical exposure on live projects and radically improve your skillset. This could be done during weekdays as well while you are studying for the CISC, or it could be done on weekends or weekdays after your CISC training is over.

The CISC is for experienced IT professionals who would like to fill in the missing gaps in their security domain knowledge or skills. Say for instance, that you've been a network administrator and are very well-versed with firewall configurations, VLANs, Active Directory, etc. However, you lack knowledge regarding the compliance standards such as ISO 27001, ISO 20000, BS 25999, as well as security auditing of databases and operating systems, etc. The CISC fits in precisely in such scenarios, and helps you develop a well-rounded portfolio of information security skills and know-how. Additionally, to get to the next level, we'll also train you on presentation skills, report writing, and business communication.

For those looking at obtaining a position as security consultants or security managers, you need not look further than the 8-week CISC program. For those, who are looking to break into the security domain, you should probably also evaluate doing the 2 month hands-on practical internship.

What live projects would I be working on?

The USP of the CISC is the fact that you'll be put on live projects. Once you've completed your study material, and have cleared the tests you will be put as an understudy on the actual projects being executed at our firm. These include penetration testing projects, compliance projects, security audits, etc. You may either be involved for the entire project or for parts of the project. The duration of the practical training will be of 2 months.

What are my options after the CISC?

The whole world opens up to you after the CISC. The opportunities are many and quite lucrative. Depending on your previous experience, and your performance during the CISC:

1. You could join NII as a Security Analyst
2. You could do a short internship at NII
3. We will help you find placements within the industry
4. You will also automatically be prepared for the CPH (Certified Professional Hacker) certification
5. You will also automatically be prepared for the CISSP (Certified Information Systems Security Professional) certification

Course Contents

The course content is pretty much the most expansive one that you would ever see. We cover almost everything that a real-world security consultant would need to know. These are the main domains of the CISC:

TCP/IP Fundamentals - the founding blocks for any information security professional
Information Security Concepts - information security terms, concepts, principles, and models
Network Security - secure network design, DMZ, VLANs, firewalls, IDS/IPS, WLAN security, VPNs, telecommunications
Operating System Security - security fundamentals of Windows and Unix operating systems
Database Security - Oracle, MS SQL, Sybase
Web Application Security
Physical Security
Ethical Hacking
Encryption Protocols & Algorithms
Compliance - ISO 27001, ISO 20000, BS 25999, PCI DSS, SOX, HIPAA
Business Continuity & Disaster Recovery Planning
Digital Forensics - training on enCase and advanced digital forensics techniques
Indian IT Act 2000 and other Cyber Laws