ISC2 CISSP Overview

ISC2 CISSP Outline

Domain 1: Security and Risk Management

• Understand, Adhere to, and Promote Professional Ethics
• Understand and Apply Security Concepts
• Evaluate and Apply Security Governance Principles
• Understand Legal, Regulatory, and Compliance Issues in a Holistic Context
• Understand Requirements for Investigation Types
• Develop, Document, and Implement Security Policy, Standards, Procedures, and Guidelines
• Identify, Analyze, Assess, Prioritize, and Implement Business Continuity Requirements
• Contribute to and Enforce Personnel Security Policies and Procedures
• Understand and Apply Risk Management Concepts
• Understand and Apply Threat Modeling Concepts and Methodologies
• Apply Supply Chain Risk Management Concepts
• Establish and Maintain a Security Awareness, Education, and Training Program

Domain 2: Asset Security

• Identify and Classify Information and Assets
• Establish Information and Asset Handling Requirements
• Provision Information and Assets Securely
• Manage Data Lifecycle
• Ensure Appropriate Asset Retention
• Determine Data Security Controls and Compliance Requirements

Domain 3: Security Architecture and Engineering

• Research, Implement, and Manage Engineering Processes Using Secure Design Principles
• Understand Fundamental Concepts of Security Models
• Select Controls Based Upon Systems Security Requirements
• Understand Security Capabilities of Information Systems
• Assess and Mitigate Vulnerabilities of Security Architectures, Designs, and Solution Elements
• Select and Determine Cryptographic Solutions
• Understand Methods of Cryptanalytic Attacks
• Apply Security Principles to Site and Facility Design
• Design Site and Facility Security Controls
• Manage the Information System Lifecycle

Domain 4: Communication and Network Security

• Apply Secure Design Principles in Network Architectures
• Secure Network Components
• Implement Secure Communication Channels According to Design

Domain 5: Identity and Access Management IAM

• Control Physical and Logical Access to Assets
• Design Identification and Authentication Strategy
• Federated Identity with a Third-Party Service
• Implement and Manage Authorization Mechanisms
• Manage the Identity and Access Provisioning Lifecycle
• Implement Authentication Systems

Domain 6: Security Assessment and Testing

• Design and Validate Assessment, Test, and Audit Strategies
• Conduct Security Control Testing
• Collect Security Process Data
• Analyze Test Output and Generate Report
• Conduct or Facilitate Security Audits

Domain 7: Security Operations

• Understand and Comply with Investigations
• Conduct Logging and Monitoring Activities
• Perform Configuration Management CM
• Apply Foundational Security Operations Concepts
• Apply Resource Protection
• Conduct Incident Management
• Operate and Maintain Detection and Preventative Measures
• Implement and Support Patch and Vulnerability Management
• Understand and Participate in Change Management Processes
• Implement Recovery Strategies
• Implement Disaster Recovery Processes
• Test Disaster Recovery Plans
• Participate in Business Continuity Planning and Exercises
• Implement and Manage Physical Security
• Address Personnel Safety and Security Concerns

Domain 8: Software Development Security

• Understand and Integrate Security in the Software Development Life Cycle SDLC
• Identify and Apply Security Controls in Software Development Ecosystems
• Assess the Effectiveness of Software Security
• Assess Security Impact of Acquired Software
• Define and Apply Secure Coding Guidelines and Standards

ISC2 CISSP Training Includes

• 25-Year Veteran Instructor with Over 60,000 Students Trained and the Best Pass Rates in the Industry
• “Pass on the First Attempt!” Guarantee
• Online Live Instructor-Led Training
• 1 Year Access to Training Session Recordings
• ISC2 CISSP Official Study Guide
• ISC2 CISSP Official Practice Test Engine (Phase 1)
• Advanced Custom Practice Test Engine (Phase 2)
• Final Custom Practice Exam Engine (Phase 3)
• Exam + Retake
• After Class Support and Mentoring

ISC2 CISSP Audience

• Chief Information Security Officer
• Chief Information Officer
• Director of Security
• IT Director/Manager
• Security Systems Engineer
• Security Analyst
• Security Manager
• Security Auditor
• Security Architect
• Security Consultant
• Network Architect

About ISC2 CISSP Exam

• Exam title: CISSP
• Exam code: ISC2 CISSP
• Number of questions: 100 – 150
• Duration: 3 Hours
• Availability: Pearson VUE
• Test Format: Multiple Choice

About the ISC2 CISSP Instructor

Eric Reed is a nationally recognized cybersecurity instructor and founder of Eric Reed Cybersecurity Training, with over 25 years of experience developing mission-ready IT and security professionals. A Master Certified EC-Council Instructor and 10-time Instructor of the Year—including the 2024 CEH Instructor of the Year from EC-Council—Eric has trained more than 60,000 students worldwide across certifications including CompTIA Security+, CySA+, PenTest+, CISSP, and CEH.

Renowned for his engaging teaching style and unmatched pass rates, Eric has delivered training for leading organizations across defense, government, healthcare, finance, and technology—including Boeing, Lockheed Martin, Verizon, the U.S. Department of Defense, and the Mayo Clinic. His programs emphasize real-world application, DoD 8140/NICE alignment, and first-attempt success, helping individuals and teams strengthen their defenses and advance their careers in cybersecurity.