CISSP Exam Study Guide

Prepare for the ISC2 Certified Information Systems Security Professional (CISSP) exam with a focused, comprehensive study companion aligned to the current exam blueprint (effective April 15, 2024).

CISSP Study Guide organizes everything into the 8 exam domains — Security and Risk Management; Asset Security; Security Architecture and Engineering; Communication and Network Security; Identity and Access Management (IAM); Security Assessment and Testing; Security Operations; and Software Development Security — so you study exactly what the exam tests.

FIVE WAYS TO STUDY
• 171 flashcards — tap to flip, tagged by exam domain
• 127 multiple-choice questions with worked explanations
• 102 true/false drills built from real misconceptions
• Term-matching game — pair all 116 key terms, in rounds of five
• Searchable 116-term glossary and 44 models & frameworks

TOPICS COVERED
• Security and Risk Management: the CIA triad, governance, risk treatment, ALE/SLE/ARO quantitative risk, security policies vs. standards vs. guidelines, BCP/DRP, ethics, and legal/regulatory frameworks
• Asset Security: data classification, ownership roles, data lifecycle, retention, and data protection methods
• Security Architecture and Engineering: security models (Bell-LaPadula, Biba, Clark-Wilson), cryptography, PKI, secure design principles, and physical security
• Communication and Network Security: OSI/TCP-IP models, secure protocols, network attacks, segmentation, and secure network components
• Identity and Access Management: authentication factors, biometrics (FAR/FRR/CER), access control models (DAC/MAC/RBAC/ABAC), Kerberos, SSO, and federation (SAML, OAuth, OIDC)
• Security Assessment and Testing: vulnerability assessment vs. penetration testing, SAST/DAST, log review, SOC 1/2/3 reports, and security metrics
• Security Operations: digital forensics, incident response, logging and monitoring, backups and RAID, and disaster-recovery sites and testing
• Software Development Security: the SDLC, DevSecOps, the OWASP Top 10, secure coding, database security, and software acquisition risk

Start free with a preview of every section. Unlock Premium with a one-time lifetime purchase or a low monthly subscription — both include the entire question bank, glossary, and models & frameworks library.

This app is an independent study aid and is not affiliated with, endorsed by, or sponsored by ISC2. All trademarks are the property of their respective owners. Exam content and policies change over time — always verify current requirements with the certifying body.