My Skill Lab
CybersecurityAdvanced

CISSP Fundamentals

The eight domains, the mindset and how to think like a manager.

Taught by Kiran Basnet · Security Engineer

What you'll learn

  • Adopt the risk-based, manager-level mindset the CISSP exam rewards
  • Summarise all eight domains of the Common Body of Knowledge and their focus
  • Apply governance, risk management and legal concepts to scenario questions
  • Explain secure architecture, cryptography and access control models
  • Describe security assessment, testing and operations at a programme level
  • Choose the best answer on the adaptive exam under time pressure

About this course

This CISSP fundamentals course is for experienced security practitioners preparing for the industry's leading senior credential and the risk-based, manager-level thinking it demands. It walks through all eight domains of the current Common Body of Knowledge: security and risk management, asset security, security architecture and engineering, communication and network security, identity and access management, security assessment and testing, security operations, and software development security. You will learn governance and risk frameworks, cryptography and secure design, access models, testing and monitoring, and how to answer questions from a manager's perspective rather than a technician's. The final lesson covers the adaptive exam format and a strategy for choosing the best answer under pressure. Several years of security experience is assumed. Independent study material, not affiliated with or endorsed by ISC2.

Course content

7 lessons
  1. 1The CISSP Mindset and How the Exam WorksWhy CISSP tests manager-level judgement, the eight domains, and the adaptive exam format.Preview
  2. 2Domain 1: Security and Risk ManagementGovernance, risk frameworks, legal and regulatory issues, and the concepts that anchor the exam.
  3. 3Asset Security and Secure ArchitectureDomains 2 and 3: data classification and handling, plus secure design and cryptography.
  4. 4Network Security and Identity and Access ManagementDomains 4 and 5: secure network design and the models that control who accesses what.
  5. 5Security Assessment, Testing and OperationsDomains 6 and 7: how you verify controls work and how you run security day to day.
  6. 6Domain 8: Software Development SecurityBuilding security into the development lifecycle, common flaws, and secure coding practices.
  7. 7Thinking Like a Manager: Exam StrategyChoosing the best answer, working the adaptive engine, and a final study and exam-day plan.