Udemy Business

Teach on Udemy

Turn what you know into an opportunity and reach millions around the world.

Learn More

Your cart is empty.

Keep shopping

Created byThor Pedersen | 670,000+ Enrollments Worldwide, ThorTeaches Support

Last updated 4/2026

English

What you'll learn

Prepare for the 2025 version of the Certified Information Systems Security Professional (CISSP) Certification Exam.
Includes the April 2024 CISSP exam updates.
Get your free 44-page CISSP Study Guide and your 15-pages Quick Sheets for download (PDF).
Join the over 750,000 people who have enrolled from 203 countries.
114 CISSP practice questions.
Gain a clear understanding of CISSP Domain 1 (Security and Risk Management) and Domain 2 (Asset Security).
Understand IT Security and Cyber Security from a management-level perspective.
Learn where and how to start on your CISSP certification journey.
Learn why you want to get your CISSP certification, what it can give you.
14 CISSP Domain 1-2 Mind Maps

Course content

8 sections • 68 lectures • 8h 57m total length

Introduction and connect with me on Social media.0:53
What we cover: Course orientation and external study resources for certification preparation.
Why it matters: Resource awareness supports consistent learning and reduces gaps in security knowledge.
Exam relevance: Not directly tested, but supports readiness through practice questions and supplemental review.
Download your free study guides and the Udemy ratings system1:35
What we cover: Course logistics for downloading study guides and submitting an instructor review.
Why it matters: Effective study resource use supports consistent knowledge retention and self-assessment during preparation.
Exam relevance: No direct exam objectives are tested, but it affects readiness and performance on exam-style questions.
How to get the most out of my courses and the Udemy interface2:29
What we cover: Course notation cues that flag high-priority topics, partial lists, and keywords for memorization.
Why it matters: Clear signal interpretation improves accurate terminology recall and reduces misunderstanding of scope.
Exam relevance: Tested indirectly through precise term recognition and selecting correct definitions when distractors use incomplete lists.
General CISSP links.0:54

Domain 1 - What we will be covering.2:41
What we cover: Risk management fundamentals, including CIA triad prioritization and governance controls for security decision-making.
Why it matters: Security controls must align to asset needs and risk-based cost-benefit tradeoffs.
Exam relevance: Tested through conceptual distinctions and scenario-based selection of governance artifacts, risk responses, and continuity planning elements.
The CIA Triad - Part 1 - Confidentiality, Integrity, and Availability11:33
What we cover: The CIA triad and how confidentiality, integrity, and availability differ as security objectives.
Why it matters: It guides selecting controls that prevent disclosure, prevent unauthorized change, or ensure timely access.
Exam relevance: Tested as choosing which CIA objective is impacted and which control category best restores it.
The CIA Triad - Part 2 - Confidentiality, Integrity, and Availability11:12
What we cover: Availability within the CIA triad and its inverse mapping to DAD destruction.
Why it matters: Availability drives resilience control selection and balances against confidentiality and integrity requirements.
Exam relevance: Tested through scenario-based identification of which security objective is impacted and which control type best fits.
The CIA Triad Quiz
IAAA- Part 1 - Identification, Authentication, Authorization, and Accountability8:51
What we cover: IAAA as identity and access management: identification, authentication factors, authorization models, and accountability via auditing.
Why it matters: Correctly separating these functions enables appropriate access control and traceability of user actions.
Exam relevance: Tested through conceptual distinctions and scenario-based selection of MFA factors, access control models, and auditing for non-repudiation.
IAAA- Part 2 - Identification, Authentication, Authorization, and Accountability4:49
What we cover: Least privilege, need-to-know, and subject-object access control concepts with auditing and non-repudiation.
Why it matters: These controls limit unauthorized access and enforce accountability through traceable user actions.
Exam relevance: Tested through scenario-based selection between authentication, authorization, and non-repudiation controls and access control models.
IAAA- Identification, Authentication, Authorization, and Accountability Quiz
Governance and Management.8:21
What we cover: The distinction between governance and management roles in security oversight and accountability.
Why it matters: Clear role separation ensures policies, risk appetite, and execution responsibilities align across the organization.
Exam relevance: Tested through scenario-based role identification, ultimate liability assignment, and correct reporting relationships for security leadership.
Governance and Management Quiz
Standards and Frameworks.11:11
What we cover: Key security standards, control frameworks, and defense in depth as layered physical, logical, and administrative controls.
Why it matters: Correct framework selection and layered control design improves confidentiality, integrity, and availability through complementary protections.
Exam relevance: Tested through scenario-based identification of the best framework or layered control choice using keyword cues.
Laws and Regulations.7:21
What we cover: Legal categories and liability concepts, including criminal versus civil standards and due diligence versus due care.
Why it matters: These distinctions drive compliant control selection and clarify accountability when security responsibilities are assigned.
Exam relevance: Tested as conceptual differentiation and scenario-based judgment on burden of proof, regulatory scope, and negligence versus due care.
Laws and Regulations- Evidence.9:45
What we cover: Digital forensics evidence types and legal handling requirements for admissibility.
Why it matters: Proper integrity controls and lawful collection preserve evidentiary value and prevent exclusion.
Exam relevance: Tested as choosing chain of custody, hashing, write blockers, and distinguishing entrapment versus enticement.
Intellectual property.7:23
What we cover: Intellectual property protections and related abuse types including cybersquatting and typosquatting.
Why it matters: Correctly classifying IP and abuse supports appropriate legal, administrative, and technical protection choices.
Exam relevance: Tested as terminology distinctions and scenario-based identification of piracy, counterfeiting, patent infringement, trade secret theft, and squatting.
Standards and Frameworks Laws and Regulations. Intellectual property Quiz
US Laws, European Laws, and International Treaties.9:41
What we cover: Privacy protection for PII and key U.S. security and privacy laws and standards.
Why it matters: Legal and regulatory requirements drive data handling controls and define monitoring and breach response obligations.
Exam relevance: Tested as selecting the correct law or standard for a given data type, activity, or compliance requirement.
GDPR (General Data Protection Regulation).9:21
What we cover: GDPR scope, lawful processing, data subject rights, breach notification timing, and accountability roles for EU personal data.
Why it matters: It drives privacy control selection for consent, minimization, anonymization, and incident disclosure obligations.
Exam relevance: Tested as regulatory identification and requirement selection, especially extraterritorial applicability and 72-hour breach notification.
International Agreements and Guidelines.4:47
What we cover: OECD privacy guidelines as nonbinding principles for cross-border personal data protection and handling.
Why it matters: It clarifies privacy control expectations for collection, use, transparency, individual rights, safeguards, and accountability.
Exam relevance: Tested as distinguishing guidelines versus laws and recognizing Wassenaar-driven cryptography import and export restrictions.
US Laws, European Laws, and International Treaties. GDPR, Int'l Agreement Quiz
3rd Party, Acquisitions, and Divesture Security.6:39
What we cover: Third-party and organizational change risk management using SLAs and due diligence controls.
Why it matters: External dependencies and mergers can introduce weak links that require governance and assurance alignment.
Exam relevance: Tested as selecting appropriate agreements, audit rights, and integration or separation decisions based on risk.
The ISC2 Code of Ethics.4:24
What we cover: Professional ethics codes and their core canons for security practitioners.
Why it matters: Ethics guides lawful, responsible conduct and sets expectations for diligence and public trust.
Exam relevance: Tested as conceptual distinctions and scenario-based judgment between ethical, negligent, and unauthorized actions.
The ISC2 Code of Ethics Quiz
Information Security Governance: Values, Vision, Mission, and Plans.9:18
What we cover: Security governance hierarchy linking values, vision, mission, and strategic, tactical, and operational planning.
Why it matters: It aligns security policies and standards to organizational intent and clarifies governance versus management accountability.
Exam relevance: Tested as conceptual distinctions between governance artifacts and plan types, including due diligence versus due care mapping.
Information Security Governance: Policies, Procedures, Guideline, and Frameworks18:26
What we cover: Governance documents and administrative controls including policy types and the policy to standard to procedure hierarchy.
Why it matters: Clear control documentation and personnel governance drive consistent security expectations and enforceable behavior.
Exam relevance: Tested as distinguishing mandatory versus discretionary documents and selecting appropriate administrative controls for workforce and third parties.
Information Security Governance. Policies, Procedures, Guideline & Frameworks
Access Control Categories and Types.7:21
What we cover: Access control categories and control types for security countermeasures.
Why it matters: Correct classification drives appropriate control selection across policy, technical enforcement, and physical protection.
Exam relevance: Tested by distinguishing administrative, technical, and physical controls and mapping controls to preventive, detective, corrective, recovery, deterrent, or compensating.
Access Control Categories and Types Quiz
Risk Management - Identification.11:20
What we cover: Risk management lifecycle flow and the risk equation linking threats and vulnerabilities.
Why it matters: It drives consistent risk assessment and control selection as environments and threats change.
Exam relevance: Tested as ordering and choosing the next risk management action and distinguishing qualitative versus quantitative analysis.
Risk Management- Assessment Part 1.8:09
What we cover: Risk assessment outputs and risk response options including mitigation, transference, acceptance, and avoidance.
Why it matters: Correct risk treatment aligns controls to risk appetite and manages residual risk after countermeasures.
Exam relevance: Tested as selecting the appropriate risk response and distinguishing qualitative versus quantitative analysis and key risk terms.
Risk Management- Assessment Part 2.14:11
What we cover: Qualitative versus quantitative risk analysis and risk response options within a documented risk management process.
Why it matters: Correctly measuring risk and selecting responses enables appropriate control investment and acceptance of residual risk.
Exam relevance: Tested by distinguishing qualitative from quantitative terms and choosing mitigation, transfer, avoidance, or acceptance from given data.
KGIs, KPIs, and KRIs.4:08
What we cover: The distinction between KGIs, KPIs, and KRIs as governance and risk measurement indicators.
Why it matters: Correct indicator selection supports performance tracking, goal validation, and risk monitoring aligned to risk appetite.
Exam relevance: Tested as conceptual differentiation and choosing the right indicator type for governance and risk management decisions.
Risk Response and Mitigation & Risk and Control Monitoring and Reporting.9:58
What we cover: Risk response options and iterative monitoring plus risk management maturity progression.
Why it matters: It drives consistent control selection and governance to keep residual risk within management’s tolerance.
Exam relevance: Tested as choosing the correct risk treatment, distinguishing due diligence versus due care, and interpreting maturity levels.
Risk Mngt, KGIs, KPIs, and KRIs, Risk Response & Mitigation & Risk and Control
RACI charts (Responsible, Accountable, Consulted, Informed).3:30
What we cover: RACI charts define governance roles as Responsible, Accountable, Consulted, and Informed for tasks.
Why it matters: Clear role ownership and communication paths reduce ambiguity in security management decisions.
Exam relevance: Tested as role differentiation and selecting the correct responsibility type in governance and process scenarios.
GRC - Governance, Risk Management, and Compliance.9:19
What we cover: Governance, risk management, and compliance roles within security management and how they interrelate.
Why it matters: Clear separation of direction-setting, risk treatment, and requirement adherence drives consistent control selection and oversight.
Exam relevance: Tested as conceptual differentiation and choosing correct risk responses, assessment types, and compliance or audit actions.
NIST SP 800-53 Revision 5.10:34
What we cover: NIST SP 800-53 Rev. 5 as a security and privacy control catalog with families, classes, and baselines.
Why it matters: It supports risk-based control selection and tailoring across people, process, and technology for system lifecycles.
Exam relevance: Tested as recognizing NIST control frameworks and choosing appropriate control categories or baselines in scenario questions.
NIST SP 800-37 Revision 1 and 2.12:15
What we cover: NIST SP 800-37 Risk Management Framework lifecycle and revision two changes including the Prepare step and privacy integration.
Why it matters: It structures governance-driven risk decisions across the system lifecycle to ensure consistent security and privacy controls.
Exam relevance: Tested as framework identification and step sequencing, including mapping RMF to the Cybersecurity Framework functions.
GRC - Governance, Risk Management, and Compliance Quiz
Risk- Attackers and Types of Attacks Part 1.10:38
What we cover: Attacker types and motivations including white hat, black hat, grey hat, script kiddie, hacktivist, and state-sponsored actors.
Why it matters: Correctly classifying threat actors guides appropriate defensive controls and risk management priorities.
Exam relevance: Tested as terminology distinctions and scenario-based identification of likely actor intent, capability, and target selection.
Risk- Attackers and Types of Attacks Part 2.10:58
What we cover: Botnet command-and-control structure and phishing variants as social engineering attack types.
Why it matters: Correctly classifying these threats drives appropriate preventive controls and user-awareness defenses.
Exam relevance: Tested as terminology distinctions and best-response selection for botnet-driven DDoS and phishing, spear phishing, whaling, and vishing.
Risk- Attackers and Types of Attacks Quiz
Business Continuity Planning - Part 1.9:39
What we cover: Business continuity planning versus disaster recovery planning as organizational resilience control categories.
Why it matters: Clear plan scope and ownership enables consistent continuity decisions and prioritized recovery across business functions.
Exam relevance: Tests distinguishing BCP from DRP and selecting the correct plan type for continuity or recovery requirements.
Business Continuity Planning - Part 2.7:43
What we cover: The BCP and DRP lifecycle using a NIST-aligned iterative framework from initiation through maintenance.
Why it matters: A structured continuity process reduces gaps by aligning recovery priorities, controls, and leadership accountability.
Exam relevance: Tested as selecting the correct BCP/DRP phase, BIA purpose, and governance role in continuity decisions.
BIA (Business Impact Analysis).12:38
What we cover: Business impact analysis metrics for continuity planning, including RPO, RTO, WRT, MTD, MTBF, MTTR, and MOR.
Why it matters: These values drive recovery priorities and continuity control selection based on acceptable data loss and downtime.
Exam relevance: Tested through scenario-based identification and comparison of recovery objectives, outage limits, and reliability metrics.
External dependencies in BIA11:10
What we cover: External dependencies as a business impact analysis input for third-party and supply-chain risk.
Why it matters: Dependency criticality and failure impact drive appropriate continuity controls and risk treatment decisions.
Exam relevance: Tested through selecting risk responses and third-party controls like SLAs, redundancy, monitoring, and compliance oversight.
Business Continuity Planning, BIA Quiz
What we covered in Domain 11:22
What we cover: Domain 1 security fundamentals across CIA, identity and access control, governance, risk, legal, and continuity.
Why it matters: These concepts drive correct control selection and role responsibility for protecting information and systems.
Exam relevance: Tested as conceptual distinctions and scenario-based choices among access principles, governance controls, risk actions, and continuity artifacts.
(Bonus) Domain 1 - 30 practice questions.
Domain 1 links.1:57

Domain 2 - What we will be covering.1:14
What we cover: Information lifecycle governance including classification, data roles, privacy, retention, remanence, and data states.
Why it matters: It drives consistent controls for handling, protecting, retaining, and disposing of data across its lifecycle.
Exam relevance: Tested through selecting correct data classification, ownership roles, retention and disposal requirements, and protections for data states.
The Information Life Cycle.5:29
What we cover: The information lifecycle phases and the distinction between archiving and backup.
Why it matters: Lifecycle-aligned controls enforce confidentiality, integrity, availability, retention, and appropriate disposal for sensitive data.
Exam relevance: Tested through selecting correct data handling, retention, and sanitization actions and differentiating archive versus backup purpose.
The 3 States of Data (data at rest, data in motion, and data in use).8:32
What we cover: The three data states and the matching control types for protecting confidentiality, integrity, and availability.
Why it matters: Correctly aligning technical and administrative controls reduces exposure when encryption is feasible or not.
Exam relevance: Tested as choosing appropriate protections for data at rest, in motion, and in use in scenario questions.
The 3 States of Data (data at rest, data in motion, and data in use) Quiz
Data Classification and Clearance.6:57
What we cover: Data classification levels and their mapping to mandatory access control labels and subject clearances.
Why it matters: Correct classification drives appropriate access restrictions and enforces confidentiality through label-based authorization.
Exam relevance: Tested as terminology recognition and access-control model selection involving labels, clearance, need-to-know, and least privilege.
Data Handling, Data Storage, and Data Retention.9:56
What we cover: Data handling, storage, and retention as administrative controls governing access, protection, and lifecycle disposal of data.
Why it matters: Proper governance reduces unauthorized access by enforcing need-to-know, auditability, secure media storage, and timely destruction.
Exam relevance: Tested through selecting appropriate control types and retention or disposal decisions under legal, privacy, and recovery constraints.
Data Classification & Clearance. Data Handling, Data Storage, & Data Retention
Mission, Data, System Owners, and Data Custodians.8:54
What we cover: Organizational security roles and responsibility boundaries for data governance and access control.
Why it matters: Clear accountability ensures correct control ownership, authorization, implementation, oversight, and compliance verification.
Exam relevance: Tested as role-based responsibility distinctions, especially approve versus assign access and auditor detective control identification.
Mission, Data, System Owners, and Data Custodians Quiz
Memory and Data Remanence.9:45
What we cover: Memory types and data remanence with volatile versus nonvolatile storage and firmware persistence.
Why it matters: Correct media handling prevents residual data exposure and reduces risk from persistent firmware-level compromise.
Exam relevance: Tested through scenario keywords requiring selection between RAM, ROM variants, flash, and SSD sanitization methods.
Data Remanence and Destruction.11:29
What we cover: Secure media disposal methods and the distinction between deletion, clearing, sanitization, and purging across media types.
Why it matters: Proper disposal prevents data remanence exposure and closes a common confidentiality gap in information lifecycle controls.
Exam relevance: Tested as terminology differentiation and selecting the correct disposal control for given media constraints and sensitivity.
Memory and Data Remanence. Data Remanence and Destruction Quiz
Data Security Frameworks.4:10
What we cover: Scoping, tailoring, certification, and accreditation as governance steps for selecting and approving security controls.
Why it matters: These steps align baseline controls to the environment and assign formal risk acceptance to the data owner.
Exam relevance: Tested as terminology distinctions and role-based decisions on control applicability, control strengthening, and authorization to operate.
Data Security Frameworks Quiz
Data Protection.9:12
What we cover: DRM, CASB, and DLP roles for controlling digital content, governing cloud access, and preventing sensitive data exposure.
Why it matters: These controls enforce policy-driven restrictions on access and data handling across endpoints, networks, and cloud services.
Exam relevance: Tested as selecting the correct control and distinguishing DLP types and data states from CASB and DRM functions.
Data Protection Quiz
What we covered in Domain 21:09
What we cover: Data classification and handling concepts including labels, clearances, data states, memory types, and data remanence.
Why it matters: Correct handling controls prevent unauthorized disclosure through improper access decisions and incomplete media sanitization.
Exam relevance: Tested as conceptual distinctions and scenario-based selection of appropriate data handling and media disposal controls.
(Bonus) Domain 2 - 30 practice questions.
Domain 2 links.0:36

How to build your CISSP study plan.10:51
What we cover: How to structure and adapt a study plan using iterative review and practice testing.
Why it matters: A feedback-driven plan targets weak knowledge areas and improves retention through deliberate review.
Exam relevance: Tested indirectly through scenario-based selection of best answers requiring broad recall and consistent performance under timed questions.
How to use practice questions, deconstruct them, and time management- Part 1.8:07
What we cover: How to approach scenario-based practice questions using concept explanation, question deconstruction, and time management.
Why it matters: It improves control selection judgment and prevents memorization from replacing correct security reasoning.
Exam relevance: It appears as a best-first-least scenario choices requiring management-oriented answers and careful reading of what is asked.
How to use practice questions, deconstruct them, and time management- Part 2.10:25
What we cover: Test-taking strategy for deconstructing questions using keywords, indicators, and answer elimination.
Why it matters: It improves accuracy by aligning selections to stated constraints and required priority.
Exam relevance: Appears as best or first choice items where distractors are plausible and order or precision decides.

How to design your career and certification path.13:36
What we cover: How to align certifications to a target security role by working backward from job requirements.
Why it matters: Role-aligned credential planning supports appropriate skill development and reduces mismatched security responsibilities.
Exam relevance: Minimal direct coverage; may appear indirectly in questions mapping job roles to security responsibilities and baseline certification scope.
How to reach your goals, in this case passing the CISSP exam!16:29
What we cover: Study planning and habit formation to improve focus and consistency.
Why it matters: Consistent, single-task focus improves knowledge retention and reduces errors from fatigue and distraction.
Exam relevance: Appears as time-management and prioritization judgment when selecting the best next action under constraints.
Scheduling your exam and what to expect.5:31
What we cover: Exam administration policies including registration identity matching, unscored items, scoring scale, and rescheduling windows.
Why it matters: Correct administrative compliance prevents denial of entry and supports ethical, professional conduct expectations.
Exam relevance: Tested as policy and process knowledge, including recognizing unscored questions and interpreting scaled scoring versus percent-correct.
What to expect on exam day and after.7:33
What we cover: Testing center exam-day procedures including check-in, identification verification, NDA timing, breaks, and proctoring controls.
Why it matters: Following administrative security controls prevents disqualification and preserves exam integrity and chain of custody.
Exam relevance: Appears as policy and procedure recognition questions about identification requirements, prohibited items, timing rules, and reporting misconduct.
I passed the exam now what?7:20
What we cover: Post-exam certification lifecycle requirements including endorsement, experience validation, audits, and continuing education maintenance.
Why it matters: Credential governance enforces verified competence and ongoing professional currency through documented experience and education.
Exam relevance: Tested as governance and compliance knowledge, focusing on endorsement prerequisites, audit purpose, and continuing education obligations.
I failed the exam now what?8:08
What we cover: Retake strategy using domain proficiency feedback and disciplined test-taking technique.
Why it matters: Targeted remediation improves knowledge retention and reduces repeated errors under time pressure.
Exam relevance: Tested indirectly through scenario questions requiring precise reading, option elimination, and selecting best answers.

Why should you want to get the CISSP certification?8:12
What we cover: Certification demand and career-market positioning for security roles.
Why it matters: Credential selection influences role alignment and signals baseline competency expectations in security hiring.
Exam relevance: Not directly tested; only supports understanding certification scope and role expectations referenced in workforce context items.
The 8 CISSP domains.15:31
What we cover: The exam domain structure and how core security topics map across governance, technical controls, and operations.
Why it matters: Domain mapping supports selecting appropriate control categories and maintaining defense-in-depth across people, process, and technology.
Exam relevance: Appears as domain-to-concept alignment and scenario-based control selection across governance, asset handling, IAM, testing, operations, and secure development.

The 4 things you need to pass your CISSP certification.6:57
What we cover: A study approach emphasizing knowledge application, question deconstruction, best-answer selection, and time management.
Why it matters: These skills enable accurate security judgment under constraints rather than memorization.
Exam relevance: Questions test scenario interpretation, keyword-driven intent, and choosing the best control or action within time limits.
How to find your study materials- Videos and books.9:39
What we cover: Selecting complementary study resources using videos and books to cover the full exam objective set.
Why it matters: Multiple independent sources reduce blind spots and improve accuracy of security concept interpretation.
Exam relevance: Tested indirectly through scenario judgment requiring correct perspective and precise terminology across domains.
How to find your study materials- Free resources.7:10
What we cover: Free security study resources including OWASP Top 10 and NIST special publications as reference frameworks.
Why it matters: Framework familiarity improves correct control selection and mitigation alignment across common attack and defense concepts.
Exam relevance: Tested through scenario prompts requiring identification of attack type and best mitigation using OWASP and NIST concepts.
How to find your study materials- Practice questions.7:14
What we cover: Practice-question strategy focused on reviewing uncertain and incorrect items and avoiding answer memorization.
Why it matters: Targeted restudy closes knowledge gaps and improves conceptual accuracy for security decision-making.
Exam relevance: Tested through scenario questions requiring keyword-driven option selection and distinguishing similar answers under time pressure.
What I would get if I were studying for the CISSP.2:53
What we cover: Study resource selection based on budget and learning style for exam preparation.
Why it matters: Matching materials to constraints improves coverage consistency and reduces gaps in security knowledge.
Exam relevance: Not directly tested; supports preparation strategy rather than any objective or scenario decision.

Requirements

A basic understanding and knowledge of computers, networks, IT, and cyber security.
Personal cyber security knowledge and experience are bonuses but not required. The CISSP certification is THE senior-level cyber security certification and will assume an intermediate understanding of cyber security concepts.
Wanting to learn about management level IT Security and Cyber Security.

Description

* Updated for the 2024 CISSP curriculum and exam. We do in-place updates, meaning any future exam updates you get for free*

Welcome, I am Thor Pedersen, here to help you pass your CISSP certification and advance your career.

Get your CISSP certification, the gold standard in IT Security, and unlock career opportunities with an average salary of over $147,000 in the US.

There are over 82,000 CISSP job openings, so now is the perfect time to get certified.

Join the over 750,000 enrollments from 203 countries who have taken my “Best Selling” and “Highest Rated” CISSP, CISM, and Certified in Cybersecurity (CC) courses here on Udemy.

I think my courses are fantastic but don't just take my word for it. Here's what some of my other students have to say about them:

Thor's videos played a major factor in my ability to pass I cannot recommend them enough! (Blair, ★★★★★).
I passed the CISSP with the ISC Book and Thor's lectures and practice questions. Enough said! (Warren, ★★★★★).
Thor the Legend Pedersen! His course material here, his training site which has other supplementary stuff and his facebook channel all helped me in passing my CISSP. (Kenny, ★★★★★).
This content helped me pass my CISSP first time! It was the main material I used for studying! Very helpful! (Duncan, ★★★★★).
This course assisted me in successfully passing the CISSP Exam! Highly recommend! (Patrick, ★★★★★).
Hi Thor, I used your test and videos and passed the exam at first attempt. (Shan, ★★★★★).

Join our community of successful students and reach your certification goals!

When you buy this course you get all this:

9 hours of CISSP videos: Covering the CISSP Domain 1 and 2 exam topics.
44-page PDF CISSP study guides: Detailed guides made from our lectures.
14 CISSP Domain 1-2 Mind Maps: Covering all major topics.
15-page PDF Quick Sheets: For your review sessions.
2-page PDF CISSP Mnemonics: Memory aids to help you remember key concepts.
60 Domain 1-2 practice questions: Test your knowledge with 30 questions from each domain.
54 topic-specific questions: Reaffirm your knowledge after each major topic.
102 website links: Additional resources to deepen your understanding of Domain 1 and 2 topics.
Subtitles in multiple languages: English, Spanish (Latin America), Portuguese (Brazil), French, Arabic, Japanese, Chinese, and Hindi.
An automatic certificate of completion: Hang on your wall or use for CEUs/PDUs. (9 CEUs).
30-day money-back guarantee: No questions asked.
Lifetime Access to the course and all future updates.
Offline video viewing: Available on the Udemy mobile apps.

In Domain 1 we cover:

1.1 Understand, adhere to, and promote professional ethics

1.2 Understand and apply security concepts

1.3 Evaluate, apply, and sustain security governance principles

1.4 Understand legal, regulatory, and compliance issues that pertain to information security in a holistic context

1.5 Understand requirements for investigation types (i.e., administrative, criminal, civil, regulatory, industry standards)

1.6 Develop, document, and implement security policy, standards, procedures, and guidelines

1.7 Identify, analyze, assess, prioritize, and implement Business Continuity (BC) requirements

1.8 Contribute to and enforce personnel security policies and procedures

1.9 Understand and apply risk management concepts

1.10 Understand and apply threat modeling concepts and methodologies

1.11 Apply supply chain risk management (SCRM) concepts

1.12 Establish and maintain a security awareness, education, and training program

In Domain 2 we cover:

2.1 Identify and classify information and assets

2.2 Establish information and asset handling requirements

2.3 Provision information and assets securely

2.4 Manage data lifecycle

2.5 Ensure appropriate asset retention (e.g., End of Life (EOL), End of Support)

2.6 Determine data security controls and compliance requirements

We continue to update our courses to make sure you have the latest and most effective study materials:

2025: Added 14 CISSP Domain 1-2 Mind Maps. Updated quiz and practice questions.
2024: Updated for the 2024 curriculum. New video on External Dependencies in BIA. Added subtitles in Japanese and Portuguese (Brazil).
2023: 40+ updates with new content, clearer explanations, practice questions, and study guides. Added subtitles in Spanish (Latin America), French, Arabic, Chinese, and Hindi, and added topic quizzes with 54 questions.
2022: 30+ updates with new content, clearer explanations, practice questions, and study guides.
2021: Full course update for the 2021 curriculum.
2020: 40+ updates with new content, clearer explanations, practice questions, and study guides.
2019: 20+ updates with new content, clearer explanations, practice questions, and study guides.
2018: Full course update for the 2018 curriculum.

Start Your Certification Journey Today!

Join thousands of successful professionals who have transformed their careers with ThorTeaches. Let me guide you to CISSP certification success.

Enroll now and let's achieve your certification goals together!

Thor Pedersen

Who this course is for:

Students preparing for their CISSP exam.
Anyone wanting to get a deeper understanding of cyber security at a management level.
Cyber Security professionals wanting to grow their knowledge.
Professionals needing CEUs/PDUs for other certifications. (9 CEUs)

What you'll learn

Explore related topics

Course content

Introduction4 lectures • 6min

CISSP Domain 1: Security and Risk Management35 lectures • 5hr 3min

CISSP Domain 2: Asset Security12 lectures • 1hr 17min

(Bonus) Build your CISSP study plan and how to deconstruct CISSP exam questions3 lectures • 29min

(Bonus) Practical information - Scheduling the exam, exam day and after6 lectures • 59min

(Bonus) Why you need to get CISSP certified and the 8 CISSP domains.2 lectures • 24min

(Bonus) How to find the right study materials for your CISSP studying.5 lectures • 34min

Bonus lecture.1 lecture • 6min

Requirements

Description

Who this course is for: