🇺🇸 United States · IT
Certified Information Systems Security Professional (CISSP) Syllabus
ISC2 advanced certification for experienced information security professionals. The full Certified Information Systems Security Professional (CISSP) syllabus: 8 subjects, 32 chapters, 102 topics and 303 sub-topics, with 488 flashcards written against it.
Certified Information Systems Security Professional (CISSP) subjects
Certified Information Systems Security Professional (CISSP) has 8 subjects. Each one is listed below with its chapters in syllabus order; open a subject for every topic and sub-topic inside them.
Security and Risk Management
- Security Governance and Foundational Principles · 3 topics
- Compliance, Legal, and Regulatory Requirements · 4 topics
- Professional Ethics and Security Awareness · 3 topics
- Risk Management Concepts · 4 topics
- Business Continuity Planning · 3 topics
Asset Security
- Information and Asset Classification · 3 topics
- Data Lifecycle and Handling · 3 topics
- Privacy Protection and Data Roles · 3 topics
- Data Protection Methods · 3 topics
Security Architecture and Engineering
- Secure Design Principles and Models · 3 topics
- Fundamental Hardware and Software Architecture · 3 topics
- Cryptography Fundamentals · 4 topics
- Cryptanalysis and Attacks · 3 topics
- Physical and Environmental Security · 3 topics
Communication and Network Security
- Network Architecture and Protocols · 4 topics
- Secure Network Components · 3 topics
- Secure Communication Channels · 3 topics
- Network Attacks and Defenses · 3 topics
Identity and Access Management (IAM)
- Identification and Authentication · 3 topics
- Access Control Models and Mechanisms · 3 topics
- Identity Management Across Environments · 4 topics
Security Assessment and Testing
- Assessment and Test Strategies · 3 topics
- Security Testing Techniques · 4 topics
- Audit and Reporting · 3 topics
Security Operations
- Operational Foundations and Investigations · 3 topics
- Resource Protection and Provisioning · 3 topics
- Incident Management · 3 topics
- Disaster Recovery and Resilience · 3 topics
- Physical and Personnel Operational Security · 3 topics
Software Development Security
- Security in the Software Development Lifecycle · 3 topics
- Secure Coding and Common Vulnerabilities · 3 topics
- Assessing Software Security Effectiveness · 3 topics
Certified Information Systems Security Professional (CISSP) flashcards
488 question-and-answer cards across 8 subject decks, each shown in full on its subject page.
- Security and Risk Management — 72 cards
- Asset Security — 51 cards
- Security Architecture and Engineering — 91 cards
- Communication and Network Security — 51 cards
- Identity and Access Management (IAM) — 51 cards
- Security Assessment and Testing — 50 cards
- Security Operations — 71 cards
- Software Development Security — 51 cards
Certified Information Systems Security Professional (CISSP) syllabus FAQ
What subjects are in the Certified Information Systems Security Professional (CISSP) syllabus?
Certified Information Systems Security Professional (CISSP) covers 8 subjects: Security and Risk Management, Asset Security, Security Architecture and Engineering, Communication and Network Security, Identity and Access Management (IAM), Security Assessment and Testing, Security Operations and Software Development Security.
How many chapters and topics are in the Certified Information Systems Security Professional (CISSP) syllabus?
32 chapters and 102 topics, broken down further into 303 sub-topics, across 8 subjects. Security and Risk Management is the largest subject, with 17 topics in 5 chapters.
Are there Certified Information Systems Security Professional (CISSP) flashcards?
Yes — 488 question-and-answer flashcards in 8 subject decks. Each deck is printed in full on its subject page here, and the same cards are in the Examius app with spaced repetition. The free plan covers one exam of your choice, including its flashcards; Examius Pro, a one-time purchase, unlocks every other exam and deck.
Related IT syllabuses
Amazon Web Services certification validating skills in designing distributed systems on AWS.
Certified Ethical Hacker (CEH) syllabusEC-Council certification for penetration testing and ethical hacking skills.
Certified Information Security Manager (CISM) syllabusISACA certification focused on information security management and governance.
Certified Information Systems Auditor (CISA) syllabusISACA certification for professionals who audit, control, and assess information systems.
Cisco Certified Network Associate (CCNA) syllabusCisco's associate-level certification for networking fundamentals and administration.
CompTIA Security+ syllabusEntry-level vendor-neutral cybersecurity certification from CompTIA covering core security skills.
Google Cloud Professional Cloud Architect syllabusGoogle Cloud certification validating ability to design and manage solutions on Google Cloud Platform.
Microsoft Certified: Azure Administrator Associate syllabusMicrosoft certification validating skills in managing Azure cloud resources and services.
Project Management Professional (PMP) syllabusPMI certification for project managers demonstrating experience and competence leading projects.