The CISSP exam covers a high-level range of topics that help demonstrate competency in IT fundamentals including:
Before taking the CISSP certification exam, you should feel confident in demonstrating your knowledge across these 7 core areas:
-
Security and Risk Management
Evaluate and apply security governance principles to support alignment of security functions for business strategy, organizational processes, control frameworks, and due diligence. Understand legal and regulatory issues related to cyber crimes, intellectual property, privacy laws, and cross-border data flows.
-
Asset Security
Determine appropriate security protocols related to data classification and asset classification, including privacy and data retention requirements.
-
Security Architecture and Engineering
Assess and mitigate the vulnerabilities of security architectures, designs, and solution Elements in client-based systems, server-based systems, database systems, cryptographic systems, cloud based systems, and more.
-
Communication and Network Security
Implement secure design principles in network architectures, network components, and network communication channels.
-
Identity and Access Management (IAM)
Control physical and logical access to assets to secure business critical information, systems, devices, and facilities.
-
Security Assessment and Testing
Conduct security control testing for vulnerability assessment, penetration testing, log reviews, synthetic transactions, code review, and more.
-
Security Operations
Understand and support the security operations connected to administrative, criminal, civil, regulatory, and industry investigations.
-
Software Development Security
Understand and integrate security in the Software Development Life Cycle (SDLC) to support development methodologies, maturity models, operation and maintenance, and change management.
