Home
WSQ - ISC2 Information Systems Security Professional (CISSP) Training

Sessions 5 days
Duration 40 hrs
Level Intermediate
Assessment 2 hrs

Venue

12 Woodlands Square #07-85/86/87 Woods Square Tower 1, Singapore 737715. 5 mins walk from Woodlands (NS9) MRT station.

The venue is disabled-friendly.

TSC Title: Security Governance
TSC Code: ICT-SNA-4020-1.1

Funding for this course is valid from 18 Mar 2024 to 17 Mar 2027. Register and complete the course within this period to qualify for funding support.

By end of the course, learners should be able to:

LO1: Assess application and infrastructure component adherence to security standards, integrating organizational security operational procedures.
LO2: Develop specific action plans for business units, incorporating corporate security policies, standards, and guidelines.
LO3: Evaluate technologies and tools for addressing security gaps, aligning with security policy considerations.
LO4: Introduce security controls in alignment with corporate security policies and frameworks.
LO5: Implement security guidelines and protocols, ensuring compliance and understanding of data security controls and compliance requirements
LO6: Review and confirm the adequacy of information security controls, focusing on types of security controls and implementation procedures.
LO7: Highlight areas for improvement in security and propose revisions to security guidelines, incorporating techniques for process assessment against security standards.
LO8: Identify and address lapses in organizational security standards, focusing on issues threatening information security and integrity.

Download Course Brochure

Certificate of Achievement from Tertiary Infotech Academy Pte Ltd - Upon meeting at least 75% attendance and passing the assessment(s), participants will receive a Certificate of Achievement from Tertiary Infotech Academy Pte Ltd.
OpenCerts from SkillsFuture Singapore - After passing the assessment(s) and achieving at least 75% attendance, participants will receive a OpenCert (aka Statement of Achievement) from SkillsFuture Singapore, certifying that they have achieved the Competency Standard(s) in the above Skills Framework.

Once you are prepared for the exam, you can register for the certification here. We are Authorised Pearson Vue Testing Center. You can take the certification exam at our test center.

WSQ - ISC2 Information Systems Security Professional (CISSP) Training

Course Code: TGS-2024043392

WSQ
SFC
PSEA
UTAP
SFEC
Absentee Payroll
MCES

15 Review(s) | Add Your Review

The ISC2 Information Systems Security Professional (CISSP) Exam Prep course is meticulously designed for professionals seeking to deepen their knowledge and skills in information security. The course begins with a focus on Security and Risk Management, emphasizing professional ethics, security concepts, the legal environment, and secure design principles. Participants will gain a clear understanding of the key aspects of Asset Security, including managing information assets and data security life cycles.

Moving into the intricacies of Security Architecture and Engineering, the course covers vulnerabilities assessment, cryptographic systems, and the essentials of cryptanalysis. Communication and Network Security is another critical topic, providing insight into the OSI and TCP/IP models and their application in secure network design. Identity and Access Management (IAM) is thoroughly explored, highlighting the importance of managing identities, access controls, and authentication systems.

Additionally, the course emphasizes Security Assessment and Testing, enabling learners to design effective security assessment strategies and analyze organizational security performance. Security Operations is a key module that includes incident management, logging, and monitoring activities, as well as implementing backup and recovery strategies. The final topic, Software Development Security, delves into the vulnerabilities inherent in software systems, malware and ransomware threats, and the implementation of security controls in software development ecosystems. This course ensures that participants are well-prepared for the CISSP exam, equipping them with the knowledge to develop action plans, evaluate technologies, introduce security controls, and address lapses in organizational security standards.

Get exam-ready on our Practice Exam Portal — train in realistic Practice Mode and timed Exam Mode, then retake them as many times as you like before the real exam.

Start Practising →

Full Fee 3,500.00 Before GST

GST 315.00 9% of fee

Baseline Nett 2,065.00 SG/PR age 21+ · 50% funded

MCES / SME Nett 1,365.00 SG age 40+ · 70% funded

SkillsFuture Enterprise Credit (SFEC)

Eligible companies can use their $10,000 SFEC to cover up to 90% of out-of-pocket course fees for classes ending on or before 30 Nov 2026. A redesigned SFEC starts on 1 Dec 2026.

View on SkillsFuture for Business

SkillsFuture Credit (SFC)

Eligible Singapore Citizens can use their SFC to offset course fee payable after funding but the $4,000 Additional SFC (Mid-Career Support) cannot be used.

Direct Application on SkillsFuture Portal

UTAP

Eligible NTUC members can apply for 50% of the unfunded fee from UTAP, capped up to $250/year and for members aged 40 and above, capped up to $500/year.

Submit UTAP Claim

PSEA

Eligible Singapore Citizens can use their PSEA funds to offset course fee payable after funding.

Check PSEA Eligibility

Scroll down to “Keyword Tags” to verify for PSEA eligibility.
If there is “PSEA” under keyword tags, the course is eligible for PSEA.

Once you are eligible for PSEA, please download and fill up the PSEA Withdrawal Form, then submit the completed form to us:

PSEA Withdrawal Form Submit PSEA Form

Please bring your own laptop for hands-on training. If you don't have laptop, we can provide spare laptop for training use.

We provide free consultation related to the subject matter after the course.
Please email your queries to enquiry@tertiaryinfotech.com and we will forward your queries to the subject matter experts.

You can register your interest without upfront payment. There is no penalty for withdrawal of the course before the class commences.
We reserve the right to cancel or re-schedule the course due to unforeseen circumstances. If the course is cancelled, we will refund 100% for any paid amount.
Note the venue of the training is subject to changes due to availability of the classroom.

Course Details

Topic 1: Security and Risk Management

Understand, adhere to and Promote Professional Ethics

Understand and Apply Security Concepts

Evaluate and Apply Security Concepts

Legal Environment

Basic Secure Design Principles

Topic 2: Asset Security

Information Assets

Manage the data security life cycle

Determine Data security controls and compliance requirements

Topic 3: Security Architecture and Engineering

Assess and mitigate the vulnerabilities of Security Architectures, Design and Solution Elements

Cryptographic Systems

Hybrid Systems and the Public Key Infrastructure (PKI)

Cryptographic Systems Hygiene: Operation and Maintenance

Cryptanalysis – Methods of Cryptanalytic Attacks

Topic 4: Communication and Network Security

Open Systems Interconnection (OSI) and Transmission Control Protocol (TCP) over Internet Protocol (TCP/IP) models

OSI Layer 1 (Physical Layer)

OSI Layer 2 (Data Link Layer)

OSI Layer 3 (Network Layer)

OSI Layer 4 (Transport Layer)

OSI Layer 5 (Session Layer)

OSI Layer 6 (Presentation Layer)

OSI Layer 7 (Application Layer)

Secure Design Principles in Network Architecture

Secure Network Components

Implementing Secure Communications Channels According to Design

Topic 5: Identity and Access Management IAM

Manage the Identity and Access Provisioning Lifecycle

Implement and Manage Access Control Models and Mechanisms

Managing People and Operations

Control Physical and Logical Access to Assets

Manage Identification and Authentication of People, Devices and Services

Implement Authentication and Authorization Systems

Topic 6: Security Assessment and Testing

Design and validate Assessment, Test and Audit Strategies

Conduct Security Control Assessment

Collect Security Process Data

Analyze and report on Organization Performance

Topic 7: Security Operations

Conduct Logging and Monitoring Activities

Perform Change Management

Basic Incident Response Concepts

Conduct Incident Management

Operate and maintain Detective and Preventative Measures

Implement Backup and Recovery Strategies

Apply Security Design Principles to Site and Facility Design

Site and Facility Security Controls

Personnel Safety and Security Control

Topic 8: Software Development Security

Why so many software systems are Unsecure

Security Weaknesses at the source code level: Why so much software is unsecure

Why Databases can be unsecure

Why websites can be unsecure

Malware, ransomware, and Ransom Attacks: The software perspective

“Baking in “ Security: Development Management Choices

Security Controls in Software Development Ecosystems

Risk Analysis and Mitigation for Software Apps and Systems

Written Exam
Practical Exam

Course Info

Minimum Entry Requirement

Knowledge and Skills

Able to operate using computer functions with minimum Computer Literacy Level 2 based on ICAS Computer Skills Assessment Framework
Minimum 3 GCE ‘O’ Levels Passes including English or WPL Level 5 (Average of Reading, Listening, Speaking & Writing Scores)

Attitude

Positive Learning Attitude
Enthusiastic Learner

Experience

Minimum of 1 year of working experience.

Target Year Group : 21-65 years old

Funding Eligibility Criteria

Self-sponsored learners (individuals)

Singapore Citizens and Singapore Permanent Residents aged 21 and above.
Up to 50% course fee funding. Singapore Citizens aged 40 and above receive up to 70% under the Mid-career Enhanced Subsidy (MCES).
Singapore Citizens aged 25 and above can pay the remaining fee with SkillsFuture Credit.

Company-sponsored learners

Singapore Citizens and Singapore Permanent Residents who are direct employees of the sponsoring company.
Up to 50% course fee funding, or up to 70% for employees of SMEs (Enhanced Training Support for SMEs) and for Singapore Citizens aged 40 and above. An SME has no more than 200 employees or an annual turnover of no more than $100 million.
Employers can also claim Absentee Payroll funding for employees who attend during working hours.
Eligible companies can offset their out-of-pocket fees with SkillsFuture Enterprise Credit (SFEC).

Conditions for all funded learners

Attendance is taken digitally with Singpass for every session, including the assessment.
You must complete the course and pass all assessments (assessed as Competent).
If these conditions are not met, the funding is clawed back and the learner or employer pays the full course fee.
9% GST is charged on the full course fee before funding.
Promo and discount codes cannot be used on funded courses.
Any balance after funding can be paid in cash, with SkillsFuture Credit, with PSEA (Singapore Citizens with a PSEA), or partly reimbursed by UTAP for NTUC members.

How to Apply SkillsFuture Credit Claim for Individuals

Singapore Citizens aged 25 and above can use their SkillsFuture Credit (base tier) to pay the course fee after funding. The $4,000 mid-career top-up cannot be used for this course.

Register for this course as self-sponsored and tell us you will use SkillsFuture Credit. Do not pay the amount you plan to claim.
We email you an invoice showing the course fee after funding.
From 60 days before the course starts, and no later than the course start date, log in to MySkillsFuture with Singpass and click Claim credits.
Click Submit a Claim and search for this course by its course code, TGS-2024043392.
Select your class start date, enter the course fee payable after funding and the amount of credit to claim, then upload the invoice (PDF, JPG or PNG, under 4MB).
Review, accept the terms and click Agree and Submit. The credit is paid directly to us; processing can take up to 14 working days.

Changing or withdrawing: cancel the claim on MySkillsFuture at least one day before the course starts. If your class date changes, cancel the claim and submit a new one with the new date.

How to Apply SkillsFuture Enterprise Credit (SFEC)

SFEC helps companies pay for employee training. The current SFEC ends on 30 November 2026, and a redesigned SFEC starts on 1 December 2026.

Current SFEC: classes ending on or before 30 November 2026

Eligible companies received a one-off $10,000 credit, notified by letter to their Corppass administrator. Eligibility generally required at least 3 Singapore Citizen or PR employees and Skills Development Levy contributions.
SFEC covers up to 90% of the company's out-of-pocket course fee after other subsidies.

Check your company's SFEC eligibility and balance on EnterpriseSG.
Register your Singapore Citizen or PR employee for a class that ends by 30 November 2026, as company-sponsored, and pay the course fee after funding.
Your employee attends and completes the course. We submit the attendance and assessment results to SWDA.
No separate claim is needed. SFEC is calculated automatically once the course fee grant is approved and is paid quarterly to your company's IRAS GIRO or PayNow Corporate account.

Any unused balance of the current SFEC expires on 30 November 2026.

Redesigned SFEC from 1 December 2026

Companies with at least 3 resident employees receive a fresh $10,000 in an online SFEC wallet that offsets out-of-pocket fees upfront at enrolment, instead of reimbursing them afterwards. SWDA has not yet published the support rates and claim steps; see OurWorkforce or our SFEC guide.

How to Apply UTAP (NTUC Members)

NTUC members can claim 50% of the unfunded course fee under the Union Training Assistance Programme (UTAP), capped at $250 a year (aged below 40) or $500 a year (aged 40 and above). The cap is shared with UTAP claims for AI tool subscriptions.

Eligibility: you must be an NTUC member paying full membership fees, with your membership paid up before and during the course and when you claim. The course must not be fully paid for by your employer or another source.

Make sure your NTUC membership is paid up before the course starts.
Register for this course with us and pay the course fee after funding and SkillsFuture Credit.
Attend at least 75% of the course and sit all assessments.
Within 6 months after the course ends, go to the NTUC U Portal, open UTAP under E-services, log in with Singpass and choose Course Fee Claim.
Enter the nett course fee you paid (after all subsidies and SkillsFuture Credit, including GST), and upload your invoice or receipt and your certificate or result slip (PDF, JPG or PNG, up to 5MB each).
NTUC usually pays the claim within 4 weeks of submission.

How to Apply PSEA

Singapore Citizens with a Post-Secondary Education Account (PSEA), which stays open until around the year you turn 31, can use it to pay the course fee after funding for PSEA-approved courses. You can also use a sibling's PSEA after your own has been used up.

Check that this course shows the PSEA tag on its MySkillsFuture page.
Check your PSEA balance on MOE's Student Finance System with Singpass.
Download and complete the PSEA withdrawal form, then submit it to us.
We submit the withdrawal request to MOE. You (and your sibling, if you are using their account) authorise it in the Student Finance System. Nothing is withdrawn without this authorisation.
MOE pays us directly. If you have already paid, we refund the amount covered by PSEA.

More details: MOE PSEA overview.

Appeal Process

If you disagree with an assessment decision, you have the right to appeal.

When the assessor gives you feedback, say whether you agree with the outcome. If you agree, you and the assessor sign the Assessment Summary Record; if you disagree, do not sign it.
Discuss the decision with the assessor or the assessment manager first.
If you are still not satisfied, tell the assessor you intend to appeal. The assessor records this in the feedback section of the Assessment Summary Record and informs the assessment manager.
Lodge your appeal within 7 days, giving your reasons, using the Candidate Appeal Form. The assessor can help you write and lodge it.
An Assessment Appeal Panel reviews the information from you and the assessor and makes a decision. A record of the appeal and its outcome is kept.
You will be told the outcome within 2 weeks of lodging the appeal. The panel's decision is final.

Job Roles

DevOps Engineer
Cloud Solutions Architect
Software Developer
Infrastructure Engineer
Site Reliability Engineer (SRE)
Systems Administrator
IT Operations Specialist
Platform Engineer
Microservices Developer
Release Manager
Network Administrator (focusing on cloud-native applications)
Continuous Deployment Specialist
Backend Developer
Cloud Security Specialist
Container Orchestration Manager

Trainers

Sivanesan Sivakaruniam is an IT governance and cybersecurity professional with over 20 years of experience in technology risk management, systems auditing, and business process control. Having led digital transformation and compliance initiatives across manufacturing and service industries, he specializes in helping organizations build strong cybersecurity frameworks to safeguard their operations. His expertise includes data protection, user access management, and cyber risk mitigation strategies aligned with ISO 27001 and NIST standards. As a certified corporate trainer, Sivanesan is known for delivering clear, practical, and relatable cybersecurity guidance for both technical and non-technical audiences.

Agus Salim is an experienced IT solutions and cybersecurity professional with a strong foundation in cloud infrastructure and project management. With over a decade of experience in systems integration, software development, and IT security across both enterprise and consulting environments, he brings a practical understanding of secure system design and deployment. His credentials include PMP, CompTIA Security+, CEH, and AWS Certified Cloud Practitioner, reflecting his balanced expertise in governance, risk management, and cloud operations. Agus has worked with leading organizations such as Citi and Check Point Software Technologies, providing hands-on technical and security support across multi-cloud platforms.

Danny Teo is a cybersecurity and IT infrastructure consultant with over 20 years of experience in systems administration, endpoint protection, and enterprise network management. A certified Microsoft trainer, he has delivered professional courses in security operations, cloud administration, and IT compliance for organizations across Southeast Asia. Danny’s background in integrating cloud and on-premise systems gives him a strong foundation in designing secure, high-performance enterprise environments.

Truman Ng is a senior technology consultant and cybersecurity specialist with over two decades of experience in IT infrastructure, AI integration, and secure systems design. A PMP, ACTA, and Huawei HCIE-certified professional, he has led numerous enterprise-scale projects involving network defense, digital risk management, and automation. Truman’s background in cloud security and system architecture enables him to bridge technical and strategic perspectives in enterprise cybersecurity training.
In “ISC2 Information Systems Security Professional (CISSP) Training,” Truman focuses on applying security engineering and system architecture principles to protect organizational assets. His sessions cover critical CISSP domains such as Security Operations, Asset Security, and Infrastructure Protection. Through a blend of technical insight and practical implementation, he empowers learners to design secure infrastructures, enforce compliance controls, and adopt proactive defense strategies in complex enterprise environments.

Terence Ee is an experienced IT leader and consultant with more than 25 years of expertise in technology management, information systems, and digital transformation. He has served as Chief Information Officer at the Supreme Court of Singapore and Vice President of Information Systems at Senoko Energy, where he led major IT modernization projects. Since 2017, he has worked as an independent consultant and ACLP-certified trainer, specializing in guiding SMEs and enterprises in adopting future-ready digital platforms. As a WSQ-accredited trainer, Terence delivers programs in digital collaboration, IT governance, and productivity tools. His facilitation emphasizes case studies, simulations, and hands-on practice, enabling learners to apply modern IT systems such as Microsoft 365 and Google Workspace to improve collaboration and business efficiency. With his leadership background and deep IT expertise, Terence prepares learners to thrive in digitally transforming environments.