book

CISSP Cert Guide, 5th Edition

by Robin Abernathy, Darren R. Hayes

September 2024

Intermediate to advanced

1046 pages

27h 23m

English

Pearson IT Certification

Read now

Unlock full access

The Goals of the CISSP CertificationThe Value of the CISSP CertificationThe Common Body of KnowledgeSteps to Becoming a CISSPFacts About the CISSP ExamAbout the CISSP Cert Guide, Fifth EditionHow to Access the Companion WebsitePearson Test Prep Practice Test Software
Foundation TopicsSecurity TermsSecurity Governance PrinciplesComplianceLegal and Regulatory IssuesInvestigation TypesProfessional EthicsSecurity DocumentationBusiness ContinuityPersonnel Security Policies and ProceduresRisk Management ConceptsGeographical ThreatsThreat ModelingSecurity Risks in the Supply ChainSecurity Education, Training, and AwarenessExam Preparation TasksReview All Key TopicsComplete the Tables and Lists from MemoryDefine Key TermsAnswer Review QuestionsAnswers and Explanations
Foundation TopicsAsset Security ConceptsIdentify and Classify Information and AssetsInformation and Asset Handling RequirementsProvision Resources SecurelyData Life CycleAsset RetentionData Security ControlsExam Preparation TasksReview All Key TopicsDefine Key TermsAnswer Review QuestionsAnswers and Explanations
Foundation TopicsInformation Systems Life CycleEngineering Processes Using Secure Design PrinciplesSecurity Model ConceptsSystem Security Evaluation ModelsCertification and AccreditationControl Selection Based on Systems Security RequirementsSecurity Capabilities of Information SystemsSecurity Architecture MaintenanceVulnerabilities of Security Architectures, Designs, and Solution ElementsVulnerabilities in Web-Based SystemsVulnerabilities in Mobile SystemsVulnerabilities in Embedded SystemsCryptographic SolutionsCryptographic TypesSymmetric AlgorithmsAsymmetric AlgorithmsPublic Key Infrastructure and Digital CertificatesKey Management PracticesMessage IntegrityDigital Signatures and Non-repudiationApplied CryptographyCryptanalytic AttacksDigital Rights ManagementSite and Facility DesignSite and Facility Security ControlsExam Preparation TasksReview All Key TopicsComplete the Tables and Lists from MemoryDefine Key TermsAnswer Review QuestionsAnswers and Explanations
Foundation TopicsSecure Network Design PrinciplesIP NetworkingProtocols and ServicesConverged ProtocolsWireless NetworksCommunications CryptographySecure Network ComponentsSecure Communication ChannelsNetwork AttacksExam Preparation TasksReview All Key TopicsDefine Key TermsAnswer Review QuestionsAnswers and Explanations
Foundation TopicsAccess Control ProcessPhysical and Logical Access to AssetsIdentification and Authentication ConceptsIdentification and Authentication ImplementationIdentity as a Service (IDaaS) ImplementationThird-Party Identity Services IntegrationAuthorization MechanismsProvisioning Life CycleAccess Control ThreatsPrevent or Mitigate Access Control ThreatsExam Preparation TasksReview All Key TopicsDefine Key TermsAnswer Review QuestionsAnswers and Explanations
Foundation TopicsDesign and Validate Assessment and Testing StrategiesConduct Security Control TestingCollect Security Process DataAnalyze Test Outputs and Generate a ReportConduct or Facilitate Security AuditsExam Preparation TasksReview All Key TopicsDefine Key TermsAnswer Review QuestionsAnswers and Explanations
Foundation TopicsInvestigationsLogging and Monitoring ActivitiesConfiguration and Change ManagementSecurity Operations ConceptsResource ProtectionIncident ManagementDetective and Preventive MeasuresPatch and Vulnerability ManagementRecovery StrategiesDisaster RecoveryTesting Disaster Recovery PlansBusiness Continuity Planning and ExercisesPhysical SecurityPersonnel Safety and SecurityExam Preparation TasksReview All Key TopicsDefine Key TermsAnswer Review QuestionsAnswers and Explanations
Foundation TopicsSoftware Development ConceptsSecurity in the System and Software Development Life CycleSecurity Controls in DevelopmentAssess Software Security EffectivenessSecurity Impact of Acquired SoftwareSecure Coding Guidelines and StandardsExam Preparation TasksReview All Key TopicsDefine Key TermsAnswer Review QuestionsAnswers and Explanations
Tools for Final PreparationSuggested Plan for Final Review/StudySummary

Content preview from CISSP Cert Guide, 5th Edition

About the Technical Reviewers

R. Sarma Danturthi, PhD, PMP, CISSP, has a doctoral degree in engineering from the University of Memphis, Memphis, Tennessee, and has taught graduate-level courses in engineering, microprocessors, and computer science. He has been in the IT field for more than 20 years. His earlier experience included designing processor-level boards with interfaces and programming with several languages such as C and C++ on various platforms such as Windows, Linux, UNIX, and VAX/VMS. He has been a funding proposal reviewer, scientific paper peer reviewer for universities in the USA and Taiwan, book reviewer and exam preparation subject matter expert for Pearson, (ISC)², and CompTIA.

His current experience includes information and ...