Certified Information Systems Security Professional (CISSP) Exam Guide

Table of Contents

1. Ethics, Security Concepts, and Governance Principles
2. Compliance, Regulation, and Investigations
3. Security Policies and Business Continuity
4. Risk Management, Threat Modeling, SCRM, and SETA
5. Asset and Privacy Protection
6. Information and Asset Handling
7. Secure Design Principles and Controls
8. Architecture Vulnerabilities and Cryptography
9. Facilities and Physical Security
10. Network Architecture Security
11. Securing Communication Channels
12. Identity, Access Management, and Federation
13. Identity Management Implementation
14. Designing and Conducting Security Assessments
15. Designing and Conducting Security Testing
16. Planning for Security Operations
17. Security Operations
18. Disaster Recovery
19. Business Continuity, Personnel, and Physical Security
20. Software Development Life Cycle Security
21. Software Development Security Controls
22. Securing Software Development
23. Secure Coding Guidelines, Third-Party Software, and Databases