ISC2 CISSP: Certified Information Systems Security Professional

Chapters: 19
Official exam: 180 min
Exam fee: $749
Course language: English

Course outline · 19 lessons

01
Professional Ethics, Security Concepts, and Governance
- CISSP Domain 1: Professional Ethics, Security Concepts, and Governance
02
Legal Compliance, Investigations and Security Policy
- CISSP Domain 1: Legal Compliance, Investigations and Security Policy
03
Business Continuity, Personnel Security and Risk Management
- CISSP Business Continuity, Personnel Security and Risk Management
04
Threat Modeling, Supply Chain Security and Awareness
- CISSP Threat Modeling, Supply Chain Risk and Security Awareness
05
Asset Classification and Secure Handling
- CISSP Asset Classification: Handling and Secure Provisioning
06
Data Lifecycle, Retention, and Media Sanitization
- CISSP Data Lifecycle: Retention, Sanitization, and Security Controls
07
Secure Design Principles and Security Models
- CISSP Secure Design Principles: Security Models, TPM, and HSM
08
Security Architecture Vulnerabilities and Mitigations
- CISSP Architecture Vulnerabilities: Cloud, Containers, and OT Security
09
Cryptographic Solutions, Key Management, and Attacks
- CISSP Cryptography: Encryption, Digital Signatures, and Key Management
10
Physical Security, Facilities, and System Lifecycle
- CISSP Physical Security: Facilities, Fire Protection, and System Lifecycle
11
Secure Network Architecture and Segmentation
- CISSP Secure Network Architecture: Segmentation, IPv6, and Wireless
12
Network Components and Secure Communication Channels
- CISSP Network Security: Components, VPNs, and Communication Channels
13
Identification, Authentication, and Identity Federation
- CISSP IAM: Identification, MFA, Passkeys, and Identity Federation
14
Authorization, Identity Lifecycle, and Authentication Protocols
- CISSP IAM: Authorization, Identity Lifecycle, and Authentication Protocols
15
Security Assessment, Control Testing, and Audits
- CISSP Domain 6: Security Assessment, Testing, and Audits
16
Investigations, Logging, and Configuration Management
- CISSP Security Operations: Investigations, Logging, and Configuration Management
17
Incident Response, Detection, Patching, and Change Management
- CISSP Incident Response: Detection, Patching, and Change Management
18
Disaster Recovery, Backups, Business Continuity, and Physical Safety
- CISSP Disaster Recovery: RTO, RPO, Backups, and Business Continuity
19
Secure Software Development, APIs, and Coding Practices
- CISSP Software Development Security: Secure SDLC, APIs, and Coding

Prerequisites

Five years of cumulative paid work experience in two or more of the eight CISSP domains (one year may be waived with a degree or approved credential).
Candidates without the experience can sit the exam and become an Associate of ISC2.
Agreement to the ISC2 Code of Ethics and endorsement by an ISC2 certified professional after passing.

Exam domains

Security and Risk Management (16%)
Asset Security (10%)
Security Architecture and Engineering (13%)
Communication and Network Security (13%)
Identity and Access Management (IAM) (13%)
Security Assessment and Testing (12%)
Security Operations (13%)
Software Development Security (10%)

Study plan

Domain 1: Security and Risk Management (16%)
Domain 2: Asset Security (10%)
Domain 3: Security Architecture and Engineering (13%)
Domain 4: Communication and Network Security (13%)
Domain 5: Identity and Access Management (IAM) (13%)
Domain 6: Security Assessment and Testing (12%)
Domain 7: Security Operations (13%)
Domain 8: Software Development Security (10%)

Official certification page

Frequently asked questions

What is the format of the ISC2 CISSP: Certified Information Systems Security Professional exam?

The official ISC2 exam covers these domains: Security and Risk Management (16%) ; Asset Security (10%) ; Security Architecture and Engineering (13%) ; Communication and Network Security (13%) ; Identity and Access Management (IAM) (13%) ; Security Assessment and Testing (12%) ; Security Operations (13%) ; Software Development Security (10%). Our mock exams follow the certification’s official exam outline.

How long is the ISC2 CISSP: Certified Information Systems Security Professional exam?

The official exam lasts 180 minutes.

What are the prerequisites for ISC2 CISSP: Certified Information Systems Security Professional?

Five years of cumulative paid work experience in two or more of the eight CISSP domains (one year may be waived with a degree or approved credential). ; Candidates without the experience can sit the exam and become an Associate of ISC2. ; Agreement to the ISC2 Code of Ethics and endorsement by an ISC2 certified professional after passing.

How do I access the ISC2 CISSP: Certified Information Systems Security Professional course?

Lessons are free to read. Quizzes, mock exams and the PDF book require a signed-in (free) account.

Course outline · 19 lessons

Professional Ethics, Security Concepts, and Governance

Legal Compliance, Investigations and Security Policy

Business Continuity, Personnel Security and Risk Management

Threat Modeling, Supply Chain Security and Awareness

Asset Classification and Secure Handling

Data Lifecycle, Retention, and Media Sanitization

Secure Design Principles and Security Models

Security Architecture Vulnerabilities and Mitigations

Cryptographic Solutions, Key Management, and Attacks

Physical Security, Facilities, and System Lifecycle

Secure Network Architecture and Segmentation

Network Components and Secure Communication Channels

Identification, Authentication, and Identity Federation

Authorization, Identity Lifecycle, and Authentication Protocols

Security Assessment, Control Testing, and Audits

Investigations, Logging, and Configuration Management

Incident Response, Detection, Patching, and Change Management

Disaster Recovery, Backups, Business Continuity, and Physical Safety

Secure Software Development, APIs, and Coding Practices

Frequently asked questions