CISSP

CISSP

1. Security & Risk Management

   • Security Governance Principles
   • Confidentiality, Integrity, Availability
   • Compliance
   • Legal and Regulatory
   • Professional Ethics
   • Security Policies, Standars, Procedures & Guidelines
   • Business Continuity Requirements
   • Personnel Security Policies
   • Risk Management Concepts
   • Threat Modeling
   • Supply Chain Management, Merges & Adquisitions
   • Security Education, Training & Awareness

2. Asset Security

   • Classify Information & Supporting Assets
   • Ownership
   • Protect Privacy
   • Retention
   • Data Security Controls
   • Handling Requirements

3. Security Architecture & Engineering

   • Secure Design Principles
   • Concepts Security Models
   • Select Security Controls
   • Secure Capabilities of Information Systems
   • Vulnerabilities of Security Architecture & Design
   • Vulnerabilities of Web
   • Vulnerabilities of Mobile
   • Vulnerabilities of Embedded Devices
   • Cryptography
   • Design Facilities Security
   • Facility Security Controls

4. Communication & Networking Security

   • Network Architectures Design Security

5. Identity & Access Management

6. Security Assessment & Testing

7. Security Operations

8. Software Development Security