Certified Information Systems Security Professional (CISSP)

Certified Information Systems Security Professional (CISSP) Module 1
Security Concepts

• Apply Security Concepts
• Security Governance Principles
• Security Function
• Security Policy, Standards, Procedures and Guidelines
• Supply Chain Management
• Personnel Security and Risk Management
• Social Engineering
• Security Awareness

Certified Information Systems Security Professional (CISSP) Module 2
Business Planning and Laws

• Business Continuity
• Project Scope and Planning
• Business Impact Analysis
• Continuity Planning
• Categories of Laws
• State Privacy Laws
• Compliance
• Contracting and Procurement

Certified Information Systems Security Professional (CISSP) Module 3
Security of Assets and Cryptography 

• Classifying Information and Assets
• Data Protection Methods
• Security Baselines
• Cryptographic Foundations
• Cryptographic Life Cycle
• Asymmetric Cryptography
• Hash Functions
• Asymmetric Key Management
• Cryptographic Attacks

Certified Information Systems Security Professional (CISSP) Module 4
Security Models and Requirements 

• Secure Design Principles
• Security Models
• Vulnerabilities, Threats and Countermeasures
• Data Localization
• Client and Server Based Systems
• Internet of Things
• Virtualized Systems
• Physical Security Requirements

Certified Information Systems Security Professional (CISSP) Module 5
Network Architecture and Attacks

• OSI Model
• TCP/IP Model
• Application Layer Protocols
• Internet Protocol (IP) Networking
• Segmentation
• Content Distribution Networks (CDNs)
• Secure Communications and Network Attacks
• Load Balancing
• Switching and Virtual LANs

Certified Information Systems Security Professional (CISSP) Module 6
Identity and Access

• Controlling Access to Assets
• AAA Model
• Managing Identity and Access Provisioning Life Cycle
• Access Control Models
• Zero-Trust Access Policy Enforcement
• Access Control Attacks

Certified Information Systems Security Professional (CISSP) Module 7
Security Assessment and Operations

• Security Assessment and Testing Program
• Vulnerability Assessments
• Testing Software
• Managing Security Operations
• Managed Services in the Cloud
• Perform Configuration Management (CM)
• Manage Patches and Reduce Vulnerabilities

Certified Information Systems Security Professional (CISSP) Module 8
Incidents and Disaster Recovery Planning

• Conducting Incident Management
• Logging and Monitoring
• Automating Incident Response
• Fault Tolerance
• Recovery Strategy
• Recovery Plan Development

Certified Information Systems Security Professional (CISSP) Module 9
Software Security and Application Attacks

• Investigations
• Ethics
• Systems Development Controls
• Storage Threats
• Knowledge-Based Systems
• Malware Protection
• Application Attacks
• Exploiting Authorization and Web Application Vulnerabilities
• Secure Coding Practices

**Outlines are subject to change, as courses and materials are updated.**