The Official CISSP Certification Prep

Part 1: Access Control

1. Introduction to Access Control
2. Access Control Key Concepts, Methodologies, and Techniques
3. System Logging and Monitoring
4. Access Control Attacks and Threats
5. Access Control Effectiveness
6. Identify and Access Provisioning Lifecycle

Part 2: Telecommunications and Network Security

1. Introduction to Telecommunications and Network Security
2. Network Models and System Architecture
3. The Network and IT Security
4. Understanding the Attack
5. Tools and Tasks in Network Security
6. Layer 1: Physical Layer
7. Layer 2: Data-link  Layer
8. Layer 3: Network Layer
9. Layer 4: Transport Layer
10. Layer 5: Session Layer
11. Layer 6: Presentation Layer
12. Layer 7: Application Layer

Part 3: Information Security Governance and Risk Management

1. Introduction to Information Security Governance and Risk Management
2. Information Security Governance
3. The Risk Management Process
4. Ethical Considerations in Information Security

Part 4: Software development Security

1. System Life Cycle Security
2. Systems Development Methodologies
3. Security Issues with Programming Languages
4. Assessing the Effectiveness of Software Security
5. Security Controls
6. Database Security
7. Application and Database Security Issues

Part 5: Cryptography

1. Key Concepts and Common Terminology Used in Cryptography
2. Historical Aspect of Cryptography
3. Uses of Cryptography
4. The Cryptographic Life Cycle
5. Methods of Cryptography
6. The Different Encryption Systems
7. Algorithm Concepts
8. Methods of Cryptanalytic Attacks
9. Maintaining Network Security
10. Maintaining Application Security
11. Information Hiding Alternatives

Part 6: Security Architecture and Design

1. Key Concepts and Definitions
2. Types of Security Models
3. Components of an Architecture
4. Basic Principles of System Design
5. Evaluation Models of Information Systems
6. Common Security Frameworks
7. Vulnerabilities and Threats

Part 7: Security Architecture and Design

1. Key Concepts and Definitions
2. Types of Security Models
3. Components of an Architecture
4. Basic Principles of System Design
5. Evaluation Models of Information Systems
6. Common Security Frameworks
7. Vulnerabilities and Threats

Part 8: Security Operations

1. Security Concepts and Activities
2. Protection of Resources
3. Preventive Measures
4. Change Management and Configuration Management
5. System Resilience and Fault Tolerance Requirements 

Part 9: Business Continuity and Disaster Recovery Planning

1. Processes Required for Planning the Project
2. Defining the Organization
3. Plan Implementation 

Part 10: Legal, regulations, Investigations, and Compliance

1. The Major Legal Systems in Information Security
2. International Law in Information Security
3. Supporting the Investigation
4. The Forensic Investigation
5. Hardware/Embedded Device Analysis
6. Compliance Processes and Procedures
7. Ensure Security in Contractual Agreements and Procurement Processes  

Part 11: Physical (Environmental) Security

1. Definitions and Key Concepts
2. Site and Facility Design Considerations
3. Implementation and Operation of Perimeter Security
4. Implementation and Operation of Internal Security
5. Implementation and Operation of Facilities Security
6. Equipment Protection
7. Personnel Privacy and Safety  

• Anyone whose position requires CISSP certification
• Individuals who want to advance within their current computer security careers or migrate to a related career