ISC2 CISSP Study Guide 8th edition

Introduction

• Overview of the CISSP Exam
• Notes on This Course's Organization

Security Governance Through Principles and Policies

• Understand and Apply Concepts of Confidentiality, Integrity, and Availability
• Evaluate and Apply Security Governance Principles
• Develop, Document, and Implement Security Policy, Standards, Procedures, and Guidelines
• Understand and Apply Threat Modeling Concepts and Methodologies
• Apply Risk-Based Management Concepts to the Supply Chain
• Summary
• Exam Essentials
• Written Lab

Personnel Security and Risk Management Concepts

• Personnel Security Policies and Procedures
• Security Governance
• Understand and Apply Risk Management Concepts
• Establish and Maintain a Security Awareness, Education, and Training Program
• Manage the Security Function
• Summary
• Exam Essentials
• Written Lab

Business Continuity Planning

• Planning for Business Continuity
• Project Scope and Planning
• Business Impact Assessment
• Continuity Planning
• Plan Approval and Implementation
• Summary
• Exam Essentials
• Written Lab

Laws, Regulations, and Compliance

• Categories of Laws
• Laws
• Compliance
• Contracting and Procurement
• Summary
• Exam Essentials
• Written Lab

Protecting Security of Assets

• Identify and Classify Assets
• Determining Ownership
• Using Security Baselines
• Summary
• Exam Essentials
• Written Lab

Cryptography and Symmetric Key Algorithms

• Historical Milestones in Cryptography
• Cryptographic Basics
• Modern Cryptography
• Symmetric Cryptography
• Cryptographic Lifecycle
• Summary
• Exam Essentials
• Written Lab

PKI and Cryptographic Applications

• Asymmetric Cryptography
• Hash Functions
• Digital Signatures
• Public Key Infrastructure
• Asymmetric Key Management
• Applied Cryptography
• Cryptographic Attacks
• Summary
• Exam Essentials
• Written Lab

Principles of Security Models, Design, and Capabilities

• Implement and Manage Engineering Processes Using Secure Design Principles
• Understand the Fundamental Concepts of Security Models
• Select Controls Based On Systems Security Requirements
• Understand Security Capabilities of Information Systems
• Summary
• Exam Essentials
• Written Lab

Security Vulnerabilities, Threats, and Countermeasures

• Assess and Mitigate Security Vulnerabilities
• Client-Based Systems
• Server-Based Systems
• Database Systems Security
• Distributed Systems and Endpoint Security
• Internet of Things
• Industrial Control Systems
• Assess and Mitigate Vulnerabilities in Web-Based Systems
• Assess and Mitigate Vulnerabilities in Mobile Systems
• Assess and Mitigate Vulnerabilities in Embedded Devices and Cyber-Physical Systems
• Essential Security Protection Mechanisms
• Common Architecture Flaws and Security Issues
• Summary
• Exam Essentials
• Written Lab

Physical Security Requirements

• Apply Security Principles to Site and Facility Design
• Implement Site and Facility Security Controls
• Implement and Manage Physical Security
• Summary
• Exam Essentials
• Written Lab

Secure Network Architecture and Securing Network Components

• OSI Model
• TCP/IP Model
• Converged Protocols
• Wireless Networks
• Secure Network Components
• Cabling, Wireless, Topology, Communications, and Transmission Media Technology
• Summary
• Exam Essentials
• Written Lab

Secure Communications and Network Attacks

• Network and Protocol Security Mechanisms
• Secure Voice Communications
• Multimedia Collaboration
• Manage Email Security
• Remote Access Security Management
• Virtual Private Network
• Virtualization
• Network Address Translation
• Switching Technologies
• WAN Technologies
• Miscellaneous Security Control Characteristics
• Security Boundaries
• Prevent or Mitigate Network Attacks
• Summary
• Exam Essentials
• Written Lab

Managing Identity and Authentication

• Controlling Access to Assets
• Comparing Identification and Authentication
• Implementing Identity Management
• Managing the Identity and Access Provisioning Lifecycle
• Summary
• Exam Essentials
• Written Lab

Controlling and Monitoring Access

• Comparing Access Control Models
• Understanding Access Control Attacks
• Summary
• Exam Essentials
• Written Lab

Security Assessment and Testing

• Building a Security Assessment and Testing Program
• Performing Vulnerability Assessments
• Testing Your Software
• Implementing Security Management Processes
• Summary
• Exam Essentials
• Written Lab

Managing Security Operations

• Applying Security Operations Concepts
• Securely Provisioning Resources
• Managing Configuration
• Managing Change
• Managing Patches and Reducing Vulnerabilities
• Summary
• Exam Essentials
• Written Lab

Preventing and Responding to Incidents

• Managing Incident Response
• Implementing Detective and Preventive Measures
• Logging, Monitoring, and Auditing
• Summary
• Exam Essentials
• Written Lab

Disaster Recovery Planning

• The Nature of Disaster
• Understand System Resilience and Fault Tolerance
• Recovery Strategy
• Recovery Plan Development
• Training, Awareness, and Documentation
• Testing and Maintenance
• Summary
• Exam Essentials
• Written Lab

Investigations and Ethics

• Investigations
• Major Categories of Computer Crime
• Ethics
• Summary
• Exam Essentials
• Written Lab

Software Development Security

• Introducing Systems Development Controls
• Establishing Databases and Data Warehousing
• Storing Data and Information
• Understanding Knowledge-Based Systems
• Summary
• Exam Essentials
• Written Lab

Malicious Code and Application Attacks

• Malicious Code
• Password Attacks
• Application Attacks
• Web Application Security
• Reconnaissance Attacks
• Masquerading Attacks
• Summary
• Exam Essentials
• Written Lab

About