ISC2 CISSP: Certified Information Systems Security Professional

Chapters: 19
Official exam: 180 min
Exam fee: $749
Course language: English

Course outline · 19 lessons

01
Professional Ethics, Security Concepts, and Governance
- Professional Ethics, Security Concepts, and Governance
02
Legal, Regulatory, Investigations, and Security PolicyPaid content
- Legal, Regulatory, Investigations, and Security Policy
03
Business Continuity Requirements, Personnel Security, and Risk ManagementPaid content
- Business Continuity Requirements, Personnel Security, and Risk Management
04
Threat Modeling, Supply Chain Risk, and Security AwarenessPaid content
- Threat Modeling, Supply Chain Risk, and Security Awareness
05
Asset Classification, Handling, and ProvisioningPaid content
- Asset Classification, Handling, and Provisioning
06
Data Lifecycle, Retention, and Data Security ControlsPaid content
- Data Lifecycle, Retention, and Data Security Controls
07
Secure Design Principles, Security Models, and System CapabilitiesPaid content
- Secure Design Principles, Security Models, and System Capabilities
08
Vulnerabilities of Security ArchitecturesPaid content
- Vulnerabilities of Security Architectures
09
Cryptographic Solutions and Cryptanalytic AttacksPaid content
- Cryptographic Solutions and Cryptanalytic Attacks
10
Site and Facility Security and the Information System LifecyclePaid content
- Site and Facility Security and the Information System Lifecycle
11
Secure Network ArchitecturePaid content
- Secure Network Architecture
12
Secure Network Components and Communication ChannelsPaid content
- Secure Network Components and Communication Channels
13
Access Control, Identification, Authentication, and FederationPaid content
- Access Control, Identification, Authentication, and Federation
14
Authorization Mechanisms, Provisioning Lifecycle, and Authentication SystemsPaid content
- Authorization Mechanisms, Provisioning Lifecycle, and Authentication Systems
15
Security Assessment, Testing, and AuditsPaid content
- Security Assessment, Testing, and Audits
16
Investigations, Logging and Monitoring, and Foundational OperationsPaid content
- Investigations, Logging and Monitoring, and Foundational Operations
17
Incident Management, Detection Measures, Patching, and Change ManagementPaid content
- Incident Management, Detection Measures, Patching, and Change Management
18
Recovery Strategies, Disaster Recovery, Business Continuity, and Physical SecurityPaid content
- Recovery Strategies, Disaster Recovery, Business Continuity, and Physical Security
19
Software Development SecurityPaid content
- Software Development Security

PaidPaid course

The first chapter is free. The rest of the course, the mock exams and the PDF book need a subscription or a purchase of this course.

$49.00 · One-time purchase, lifetime access

from $6.58 / month · or a subscription to every paid course

I accept the general conditions and request immediate access. Where the legal conditions for the exception are met, I acknowledge losing my right of withdrawal for the digital content supplied. My statutory guarantees remain unaffected. General conditions · Refund policy

See subscription plans

Prerequisites

Five years of cumulative paid work experience in two or more of the eight CISSP domains (one year may be waived with a degree or approved credential).
Candidates without the experience can sit the exam and become an Associate of ISC2.
Agreement to the ISC2 Code of Ethics and endorsement by an ISC2 certified professional after passing.

Exam domains

Security and Risk Management (16%)
Asset Security (10%)
Security Architecture and Engineering (13%)
Communication and Network Security (13%)
Identity and Access Management (IAM) (13%)
Security Assessment and Testing (12%)
Security Operations (13%)
Software Development Security (10%)

Study plan

Domain 1: Security and Risk Management (16%)
Domain 2: Asset Security (10%)
Domain 3: Security Architecture and Engineering (13%)
Domain 4: Communication and Network Security (13%)
Domain 5: Identity and Access Management (IAM) (13%)
Domain 6: Security Assessment and Testing (12%)
Domain 7: Security Operations (13%)
Domain 8: Software Development Security (10%)

Official certification page

Frequently asked questions

What is the format of the ISC2 CISSP: Certified Information Systems Security Professional exam?

The official ISC2 exam covers these domains: Security and Risk Management (16%) ; Asset Security (10%) ; Security Architecture and Engineering (13%) ; Communication and Network Security (13%) ; Identity and Access Management (IAM) (13%) ; Security Assessment and Testing (12%) ; Security Operations (13%) ; Software Development Security (10%). Our mock exams follow the certification’s official exam outline.

How long is the ISC2 CISSP: Certified Information Systems Security Professional exam?

The official exam lasts 180 minutes.

What are the prerequisites for ISC2 CISSP: Certified Information Systems Security Professional?

Five years of cumulative paid work experience in two or more of the eight CISSP domains (one year may be waived with a degree or approved credential). ; Candidates without the experience can sit the exam and become an Associate of ISC2. ; Agreement to the ISC2 Code of Ethics and endorsement by an ISC2 certified professional after passing.

How do I access the ISC2 CISSP: Certified Information Systems Security Professional course?

The first chapter is open. The full course, mock exams and the PDF book are available with an active subscription or a purchase of this course. Quizzes and exams require a signed-in account.

Course outline · 19 lessons

Professional Ethics, Security Concepts, and Governance

Legal, Regulatory, Investigations, and Security PolicyPaid content

Business Continuity Requirements, Personnel Security, and Risk ManagementPaid content

Threat Modeling, Supply Chain Risk, and Security AwarenessPaid content

Asset Classification, Handling, and ProvisioningPaid content

Data Lifecycle, Retention, and Data Security ControlsPaid content

Secure Design Principles, Security Models, and System CapabilitiesPaid content

Vulnerabilities of Security ArchitecturesPaid content

Cryptographic Solutions and Cryptanalytic AttacksPaid content

Site and Facility Security and the Information System LifecyclePaid content

Secure Network ArchitecturePaid content

Secure Network Components and Communication ChannelsPaid content

Access Control, Identification, Authentication, and FederationPaid content

Authorization Mechanisms, Provisioning Lifecycle, and Authentication SystemsPaid content

Security Assessment, Testing, and AuditsPaid content

Investigations, Logging and Monitoring, and Foundational OperationsPaid content

Incident Management, Detection Measures, Patching, and Change ManagementPaid content

Recovery Strategies, Disaster Recovery, Business Continuity, and Physical SecurityPaid content

Software Development SecurityPaid content

Frequently asked questions