CISSP
CISSP (Certified Information Systems Security Professional) is an advanced, globally recognized cybersecurity certification offered by ISC2. It is designed for experienced professionals who want to demonstrate deep knowledge in designing, implementing, and managing a comprehensive cybersecurity program.
Security Foundations (Domain 1: Security & Risk Management)
Saturday
Governance, Compliance & Risk Frameworks
Security Policies, Standards & Procedures
Professional Ethics & Legal Issues
Sunday
Business Continuity Planning (BCP)
Disaster Recovery Concepts (DRP)
Risk Analysis & Management Strategies
Protecting Assets (Domain 2: Asset Security)
Saturday
Information Classification & Ownership
Data Security Controls
Privacy Protection Principles
Sunday
Secure Data Handling
Data Lifecycle Management
Cloud & Virtual Asset Security
Designing Secure Systems (Domain 3: Security Architecture & Engineering)
Saturday
Secure Design Principles
Security Models & Evaluation Criteria
Physical Security & Hardware Protections
Sunday
Cryptography Fundamentals
Security Engineering in Cloud & IoT
Emerging Technologies & Security Challenges
Networks & Communication (Domain 4: Communication & Network Security)
Saturday
Secure Network Architecture
Network Protocols & Services
Secure Communication Channels (VPN, TLS, IPSec)
Sunday
Network Attacks & Countermeasures
Wireless Security
Network Monitoring & Defense Tools
Identity & Testing (Domains 5 & 6)
Saturday
Authentication & Authorization Mechanisms
Access Control Models (RBAC, ABAC, DAC, MAC)
Identity Lifecycle Management
Sunday
Security Control Testing & Evaluation
Vulnerability Assessment & Penetration Testing
Audits, Log Reviews & Continuous Monitoring
Operations & Incident Response (Domain 7: Security Operations)
Saturday
Incident Response & Investigation
Change Management & Patch Management
Resource Protection (Media, Hardware, Software)
Sunday
Disaster Recovery Operations
Continuity Planning in Practice
Security Operations Case Studies
Software Security & Exam Readiness (Domain 8 + Integration)
Saturday
Secure Coding Practices
Secure SDLC (Software Development Lifecycle)
Application & Database Security
Sunday
Domain Reviews (Quick Recap of All 8)
Full Mock Exam (Timed Practice)
Exam Strategy & Confidence Building