book

CISSP For Dummies, 8th Edition

Name: CISSP For Dummies, 8th Edition
ISBN: 9781394261772

by Lawrence C. Miller, Peter H. Gregory

July 2024

Beginner to intermediate

608 pages

16h 46m

English

For Dummies

Read now

Unlock full access

Cover
Title Page
Copyright
Introduction
About This BookFoolish AssumptionsIcons Used in This BookBeyond the BookWhere to Go from Here
Part 1: Getting Started with CISSP Certification
Chapter 1: ISC2 and the CISSP Certification
You Must Be This Tall to Ride This Ride (And Other Requirements)Preparing for the ExamRegistering for the ExamAbout the CISSP ExaminationAfter the Examination
Chapter 2: Putting Your Certification to Good Use
Networking with Other Security ProfessionalsBeing an Active ISC2 MemberConsidering ISC2 Volunteer OpportunitiesBecoming an Active Member of Your Local Security ChapterSpreading the Good Word about CISSP CertificationHelping OthersUsing Your CISSP Certification to Be an Agent of ChangeEarning Other CertificationsPursuing Security Excellence
Part 2: Certification Domains
Chapter 3: Security and Risk Management
Understand, Adhere to, and Promote Professional EthicsUnderstand and Apply Security ConceptsEvaluate, Apply, and Sustain Security Governance PrinciplesUnderstand Legal, Regulatory, and Compliance Issues That Pertain to Information SecurityUnderstand Requirements for Investigation TypesDevelop, Document, and Implement Security Policies, Standards, Procedures, and GuidelinesIdentify, Analyze, Assess, Prioritize, and Implement Business Continuity (BC) RequirementsContribute to and Enforce Personnel Security Policies and ProceduresUnderstand and Apply Risk Management ConceptsUnderstand and Apply Threat Modeling Concepts and MethodologiesApply Supply Chain Risk Management (SCRM) ConceptsEstablish and Maintain a Security Awareness, Education, and Training Program
Chapter 4: Asset Security
Identify and Classify Information and AssetsEstablish Information and Asset Handling RequirementsProvision Information and Assets SecurelyManage Data Life CycleEnsure Appropriate Asset RetentionDetermine Data Security Controls and Compliance Requirements
Chapter 5: Security Architecture and Engineering
Using Secure Design Principles in Engineering ProcessesUnderstand the Fundamental Concepts of Security ModelsSelect Controls Based Upon Systems Security RequirementsUnderstand Security Capabilities of Information SystemsAssess and Mitigate the Vulnerabilities of Security Architectures, Designs, and Solution ElementsSelect and Determine Cryptographic SolutionsUnderstand Methods of Cryptanalytic AttacksApply Security Principles to Site and Facility DesignDesign Site and Facility Security ControlsManage the Information System Lifecycle

Chapter 6: Communication and Network Security
Apply Secure Design Principles in Network ArchitecturesSecure Network ComponentsImplement Secure Communication Channels According to Design
Chapter 7: Identity and Access Management
Control Physical and Logical Access to AssetsDesign Identification and Authentication StrategyFederated Identity with a Third-Party ServiceImplement and Manage Authorization MechanismsManage the Identity and Access Provisioning LifecycleImplement Authentication Systems
Chapter 8: Security Assessment and Testing
Design and Validate Assessment, Test, and Audit StrategiesConduct Security Control TestingCollect Security Process DataAnalyze Test Output and Generate ReportsConduct or Facilitate Security Audits
Chapter 9: Security Operations
Understand and Comply with InvestigationsConduct Logging and Monitoring ActivitiesPerform Configuration Management (CM)Apply Foundational Security Operations ConceptsApply Resource ProtectionConduct Incident ManagementOperate and Maintain Detective and Preventive MeasuresImplement and Support Patch and Vulnerability ManagementUnderstand and Participate in Change Management ProcessesImplement Recovery StrategiesImplement Disaster Recovery (DR) ProcessesTest Disaster Recovery PlansParticipate in Business Continuity Planning and ExercisesImplement and Manage Physical SecurityAddress Personnel Safety and Security Concerns
Chapter 10: Software Development Security
Understand and Integrate Security in the Software Development Life CycleIdentify and Apply Security Controls in Software Development EcosystemsAssess the Effectiveness of Software SecurityAssess the Security Impact of Acquired SoftwareDefine and Apply Secure Coding Guidelines and Standards
Part 3: The Part of Tens
Chapter 11: Ten Ways to Prepare for the Exam
Know Your Learning StyleGet a Networking Certification FirstRegister NowMake a 60-Day Study PlanGet Organized and ReadJoin a Study GroupTake Practice ExamsTake a CISSP Training SeminarAdopt an Exam-Taking StrategyTake a Breather
Chapter 12: Ten Test-Day Tips
Get a Good Night’s RestDress ComfortablyEat a Good MealArrive EarlyBring Approved IdentificationBring Snacks and DrinksBring Prescription and Over-the-Counter MedicationsLeave Your Mobile Devices BehindTake Frequent BreaksGuess — As a Last Resort
Glossary
Index
About the Authors
Connect with Dummies
End User License Agreement

Overview

Showcase your security expertise with the highly regarded CISSP certification

The CISSP certification, held by more than 150,000 security professionals worldwide, is the gold standard of cybersecurity certifications. The CISSP Exam certifies cybersecurity professionals and opens doors for career advancement. Fully updated and revised to reflect the 2024 ISC2 CISSP Exam Outline, CISSP For Dummies is packed with helpful content for all eight security domains. This book includes access to online study tools such as practice questions and digital flashcards, boosting your likelihood of success on the exam. Plus, you'll feel prepared and ready for test day thanks to a 60-day study plan. Boost your security career with this Dummies study guide.

Review all the content covered in the latest CISSP Exam
Test with confidence and achieve your certification as a cybersecurity professional
Study smarter, thanks to online practice resources and a 60-day study plan
Enhance your career with the in-demand CISSP certification
Continue advancing your career and the profession through speaking and mentoring opportunities

With up-to-date content and valuable test prep features, this book is a one-and-done resource for any cybersecurity professional studying for the CISSP exam.

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

CompTIA Network+ Certification All-in-One Exam Guide, Eighth Edition (Exam N10-008), 8th Edition

Publisher Resources

ISBN: 9781394261772Purchase Link

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills