Introduction to the CISSP Security Certification

Explore identity and access management, covering physical and logical access, identification and authentication, trust relationships, identity as a service, and authorization mechanisms; discuss provisioning lifecycle, access controls, and human factors.

Master domain 1 of security and risk management by examining confidentiality, integrity, and availability. Apply risk assessments, compliance, ethics, and business continuity concepts to protect information assets.

Explore domain 2 asset security, covering data classification, ownership, retention, and access controls, and learn how encryption and cryptography protect data at rest and in transit.

Apply secure design principles and security models to engineer architectures, select controls, and mitigate vulnerabilities, while using cryptography to protect data at rest and in transit.

Explore network fundamentals—from typologies and IP addressing to segmentation, switching, routing, wireless networking, and cryptography—for secure communication; apply secure design principles and OSI model guidance to prevent attacks.

Explore identity and access management across physical and logical domains, including identification, authentication (single and multi-factor), authorization, and credential management.

Explore design and validation of security assessments and testing, including vulnerability assessments, penetration testing, log reviews, code and interface testing, and continuous monitoring for federal and PCI contexts.

Explore how security operations keep the lights on by monitoring events and incidents, triaging and containing breaches, guiding recovery and prevention, and preserving evidence with chain-of-custody protocols.

Apply security across the software development life cycle by integrating risk analysis, encryption, access control, and testing, while choosing appropriate development models and ensuring proper release and separation of duties.

Explore change control processes, approvals, and funding. Trace machine language to high-level and object-oriented programming, and note web security topics like cookies and cross-site scripting, plus sql/nosql databases.