Certified Information Systems Security Professional (CISSP) 

About Certified Information Systems Security Professional (CISSP) 

Candidates planning to take Certified Information Systems Security Professional (CISSP) Exam are required to proves their skills set. The CISSP exam validates your skills and assesses your ability to effectively design, implement and manage a best-in-class cybersecurity program. The CISSP exam measures your expertise and helps you become an (ISC)² member, thereby opening a broad array of exclusive resources, educational tools, and peer-to-peer networking opportunities.

Who should take CISSP Exam?

Certified Information Systems Security Professional (CISSP) exam is suitable for experienced security practitioners, managers and executives interested in proving their knowledge across a wide array of security practices and principles, including those in the following positions:

• Chief Information Security Officer
• Chief Information Officer
• Director of Security
• IT Director/Manager
• Security Systems Engineer
• Security Analyst
• Security Manager
• Security Auditor
• Security Architect
• Security Consultant
• Network Architect

Course Outline

The CISSP exam evaluates your expertise across eight security domains. 

Domain 1: Describe Security and Risk Management

• 1.1  Understand, adhere to, and promote professional ethics
• 1.2  Understand and apply security concepts
  
• 1.3  Evaluate and apply security governance principles
• 1.4  Understand legal, regulatory, and compliance issues that pertain to information security in a holistic context
• 1.5  Understand requirements for investigation types (i.e., administrative, criminal, civil, regulatory, industry standards)
• 1.6  Develop, document, and implement security policy, standards, procedures, and guidelines
• 1.7  Identify, analyze, assess, prioritize, and implement Business Continuity (BC) requirements
• 1.8  Contribute to and enforce personnel security policies and procedures
• 1.9  Understand and apply risk management concepts
• 1.10  Understand and apply threat modeling concepts and methodologies
• 1.11  Apply Supply Chain Risk Management (SCRM) concepts
• 1.12  Establish and maintain a security awareness, education, and training program

Domain 2: Describe Asset Security

• 2.1  Identify and classify information and assets
• 2.2  Establish information and asset handling requirements
• 2.3  Provision information and assets securely
• 2.4  Manage data lifecycle
• 2.5  Ensure appropriate asset retention (e.g., End of Life (EOL), End of Support)
• 2.6  Determine data security controls and compliance requirements

Domain 3: Describe Security Architecture and Engineering

• 3.1 Research, implement and manage engineering processes using secure design principles
• 3.2 Understand the fundamental concepts of security models (e.g., Biba, Star Model, Bell-LaPadula)
• 3.3 Select controls based upon systems security requirements
• 3.4 Understand security capabilities of Information Systems (IS) (e.g., memory protection, Trusted Platform Module (TPM), encryption/decryption)
• 3.5 Assess and mitigate the vulnerabilities of security architectures, designs, and solution elements
• 3.6 Select and determine cryptographic solutions
• 3.7 Understand methods of cryptanalytic attacks
• 3.8 Apply security principles to site and facility design
• 3.9 Design site and facility security controls
• 3.10 Manage the information system lifecycle

Domain 4: Describe Communication and Network Security

• 4.1 Apply secure design principles in network architectures
• 4.2 Secure network components
• 4.3 Implement secure communication channels according to design

Domain 5: Describe Identity and Access Management (IAM)

5.1 Control physical and logical access to assets

5.2 Design identification and authentication strategy (e.g., people, devices, and services)

5.3 - Federated identity with a third-party service

5.4 - Implement and manage authorization mechanisms

5.5 - Manage the identity and access provisioning lifecycle

5.6 - Implement authentication systems

Domain 6: Describe Security Assessment and Testing

• 6.1 Design and validate assessment, test, and audit strategies
• 6.2 Conduct security control testing
• 6.3 Collect security process data (e.g., technical and administrative)
• 6.4 Analyze test output and generate report
• 6.5 Conduct or facilitate security audits

Domain 7: Describe Security Operations

• 7.1 Understand and comply with investigations
• 7.2 Conduct logging and monitoring activities
• 7.3 Perform Configuration Management (CM) (e.g., provisioning, baselining, automation)
• 7.4 Apply foundational security operations concepts
• 7.5 Apply resource protection
• 7.6 Conduct incident management7.7 - Operate and maintain detection and preventative measures
• 7.8 Implement and support patch and vulnerability management
• 7.9 Understand and participate in change management processes
• 7.10 Implement recovery strategies
• 7.11 Implement Disaster Recovery (DR) processes
• 7.12 Test Disaster Recovery Plans (DRP)
• 7.13 Participate in Business Continuity (BC) planning and exercises
• 7.14 Implement and manage physical security
• 7.15 Address personnel safety and security concerns

Domain 8: Describe Software Development Security

• 8.1 Understand and integrate security in the Software Development Life Cycle (SDLC)
• 8.2 Identify and apply security controls in software development ecosystems
• 8.3 Assess the effectiveness of software security
• 8.4 Assess the security impact of acquired software
• 8.5 Define and apply secure coding guidelines and standards

Exam Prerequisites

In order to acquire the CISSP cybersecurity certification, you must pass the exam and have at least five years of cumulative, paid work experience in two or more of the eight domains of the (ISC)² CISSP Common Body of Knowledge (CBK).

Exam Pattern 

• Exam Language: English
  
• Passing grade: 700 out of 1000 points
• Question format: Multiple Choice
• Exam Questions: 100-150
• Length of exam: 3 hours

FAQs on Certified Information Systems Security Professional (CISSP) 

1. What is my (ISC)2 ID?

At the time of account creation, you will be assigned an (ISC)2 ID. On the (ISC)² website you can find your ID number on your profile page.

2. How my certification can be verified by a potential employer?

By using the Certification Verification page on our website your employer can see if you are a member in good standing. While in order to process the verification your last name and member ID number will be needed.

3. How can I become a member?

There are three steps followed to become a member of (ISC)2. First, you must take and pass one of the six credential examinations. Then, you must submit an endorsement application to prove that you have the years of experience that are required to hold the credential. Once your endorsement is approved, you must pay the Annual Maintenance Fee (AMF).

4. What should I do if I'm unable to locate a test center near me?

To assist you with scheduling your examination you can contact Pearson VUE Customer Service.

5. Can I get my exam score?

Scores are not provided for those who pass an examination. Although for those who failed an examination, scores will be provided upon completion of the exam.

6. What can be brought inside the test center?

No,items are not permitted inside the test center (enlisted in the instructions page). So, you will be instructed by the test administrator to empty your pockets and place all items in a locker.

7. Does Testprep Training offer Money Back Guarantee for the Exam Simulator?

Yes, we offer a 100% unconditional money back guarantee. In case you are not able to clear the exam for then you can request for the full refund. Please note that we only refund the cost of product purchased from Testprep Training and not from the Microsoft Learning.

8. Is there any assistance from Testprep Training in terms of exam preparation?

Yes, Testprep Training offers email support for any certification related query while you are preparing for the exam using our practice exams. Your query will be handled by experts in due course.

9. Can we try the free test before purchasing the practice exam?

Yes, testprep training offers free practice tests for Certified Information Systems Security Professional (CISSP) Certification Exam which can be used before the final purchase for the complete test.

10. Do you provide any preparation guidance for this certification exam?

Yes, our experts frequently blog about the tips and tricks for exam preparation.

11. Do you offer any discount on the bulk purchase?

Yes, we offer nearly 50% discount for the order more than 10 products at a time. You can reach the testprep training Helpdesk for more details. The member of the support staff will respond as soon as possible.

For more FAQs

https://www.isc2.org/Frequently-Asked-Questions

What do we offer?

• Full-Length Mock Test with unique questions in each test set
• Practice objective questions with section-wise scores
• In-depth and exhaustive explanation for every question
• Reliable exam reports to evaluate strengths and weaknesses
• Latest Questions with an updated version
• Tips & Tricks to crack the test
• Unlimited access

What are our Practice Exams?

• Practice exams have been designed by professionals and domain experts that simulate real time exam scenario.
• Practice exam questions have been created on the basis of content outlined in the official documentation.
• Each set in the practice exam contains unique questions built with the intent to provide real-time experience to the candidates as well as gain more confidence during exam preparation.
• Practice exams help to self-evaluate against the exam content and work towards building strength to clear the exam.
• You can also create your own practice exam based on your choice and preference 

100% Assured Test Pass Guarantee