Certified Information Systems Security Professional (CISSP)

Certified Information Systems Security Professional (CISSP) Module 1
Security and Risk Management

• Professional Ethics
• Security Concepts
• Security Governance Principles
• Compliance Requirements
• Legal and Regulatory Issues
• Investigation Types
• Security Policy Standards, Procedures, and Guidelines
• Business Continuity Requirements
• Risk Management Concepts
• Supply Chain Management Concepts

Certified Information Systems Security Professional (CISSP) Module 2
Asset Security

• Identify and Classify Information and Assets
• Establish Information and Asset Handling Requirements
• Provision Resources Securely
• Manage Data Lifecycle
• Appropriate Asset Retention
• Data Security and Compliance Requirements

Certified Information Systems Security Professional (CISSP) Module 3
Security Architecture and Engineering

• Engineering Processes Using Secure Design Principles
• Security Models
• System Security Requirements
• Information Systems
• Vulnerabilities of Security Architectures, Designs, and Solution Elements
• Cryptographic Solutions
• Cryptanalytic Attacks
• Design Site and Facility Security Controls

Certified Information Systems Security Professional (CISSP) Module 4
Communications and Network Security

• Secure Design Principles in Network Architectures
• Secure Network Components
• Implement Secure Communication Channels According to Design

Certified Information Systems Security Professional (CISSP) Module 5
Identity and Access Management 

• Physical and Logical Access to Assets
• Identification and Authentication of People, Devices, and Services
• Integrate Third-Party Identity Services
• Implement and Management Authorization Mechanisms
• Identity and Access Provisioning Lifecycle
• Implement Authentication Systems

Certified Information Systems Security Professional (CISSP) Module 6
Security Assessment and Testing

• Assessment and Test Strategies
• Conduct Security Control Testing
• Collect Security Process Data
• Analyze Test Output and Generate Report
• Conduct or Facilitate Security Audits

Certified Information Systems Security Professional (CISSP) Module 7
Security Operations

• Investigations
• Logging and Monitoring Activities
• Securely Provision Resources
• Incident Management
• Detective and Preventative Measures
• Vulnerability Management
• Change Management
• Recovery Strategies
• Disaster Recovery Plans
• Implement and Manage Physical Security

Certified Information Systems Security Professional (CISSP) Module 8
Software Development Security 

• Software Development Security Life Cycle
• Environment and Security Controls
• Effectiveness of Software Security
• Impact of Acquired Software
• Secure Coding Standards and Guidelines

**Outlines are subject to change, as courses and materials are updated.**