Concepts of CISSP - Domain 1

Explore the organizational and (ISC)² code of professional ethics, including the preamble and four canons—protect society, act honorably, provide diligent service to principals, and advance and protect the profession.

Select an appropriate security framework, tailor a policy via risk, vulnerability assessments, and testing, and balance the CIA triad—confidentiality, integrity, availability—with legal defensibility and cost effectiveness.

Explore four protection mechanisms—layering (defense in depth), parallel controls, abstraction, and data hiding—and how they complement security principles and security controls to safeguard information.

We explain how a data center is segmented into logical boundaries, including a DMZ, an internet boundary, and a management zone, using firewalls, a jump post, and two-factor authentication.

Use a top-down security management planning approach to translate the information security policy into standards, baselines, guidelines, and procedures, with senior and middle management guiding implementation.

Understand how organizational processes, such as acquisitions, merger, and divestiture, along with third-party governance, shape security policy, risk, and governance across roles from senior managers to custodians and auditors.

Trace the history of data privacy from the fourth amendment to modern laws. Highlight acts like privacy act 1974, ferpa, hipaa, calea, copa, glba, patriot act, hitech, and ccp.

Explore software licensing types—contractual, shrink-wrap, click-through, and cloud service licenses—highlighting consent methods, cost implications, and corporate risk management.

Examine the GDPR and cross-border data sharing, detailing lawful processing, purpose limitation, data minimization, accuracy, storage limits, security, accountability, and the role of standard contractual clauses and binding corporate rules.

Explore the five-step process of business continuity planning, from project initiation and senior-management approval to business impact assessment, continuity planning, approval and implementation, and ongoing education, maintenance, and testing.

Outline the five-step BCP process and explain how project initiation defines scope and planning, covering business organization analysis, BCP team selection, and resource and legal considerations.

Present a complete cycle of business continuity planning, from project scope and BIA to risk assessment, continuity strategy, implementation, testing, and emergency guidance.

Explore business continuity management foundations, including BCP and DRP, and the four-step process: scope, BIA, continuity planning, approval—plus RPO, RTO, ALE, and vital records.