book

The Official (ISC)2 CISSP CBK Reference, 6th Edition

Name: The Official (ISC)2 CISSP CBK Reference, 6th Edition
ISBN: 9781119789994

by Arthur J. Deane, Aaron Kraus

September 2021

Intermediate to advanced

672 pages

21h 47m

English

Sybex

Read now

Unlock full access

Cover
Title Page
Copyright
Lead Authors
Technical Reviewer
Foreword
Introduction
DOMAIN 1: Security and Risk Management
UNDERSTAND, ADHERE TO, AND PROMOTE PROFESSIONAL ETHICSUNDERSTAND AND APPLY SECURITY CONCEPTSEVALUATE AND APPLY SECURITY GOVERNANCE PRINCIPLESDETERMINE COMPLIANCE AND OTHER REQUIREMENTSUNDERSTAND LEGAL AND REGULATORY ISSUES THAT PERTAIN TO INFORMATION SECURITY IN A HOLISTIC CONTEXTUNDERSTAND REQUIREMENTS FOR INVESTIGATION TYPESDEVELOP, DOCUMENT, AND IMPLEMENT SECURITY POLICY, STANDARDS, PROCEDURES, AND GUIDELINESIDENTIFY, ANALYZE, AND PRIORITIZE BUSINESS CONTINUITY REQUIREMENTSCONTRIBUTE TO AND ENFORCE PERSONNEL SECURITY POLICIES AND PROCEDURESUNDERSTAND AND APPLY RISK MANAGEMENT CONCEPTSUNDERSTAND AND APPLY THREAT MODELING CONCEPTS AND METHODOLOGIESAPPLY SUPPLY CHAIN RISK MANAGEMENT CONCEPTSESTABLISH AND MAINTAIN A SECURITY AWARENESS, EDUCATION, AND TRAINING PROGRAMSUMMARY
DOMAIN 2: Asset Security
IDENTIFY AND CLASSIFY INFORMATION AND ASSETSESTABLISH INFORMATION AND ASSET HANDLING REQUIREMENTSPROVISION RESOURCES SECURELYMANAGE DATA LIFECYCLEENSURE APPROPRIATE ASSET RETENTIONDETERMINE DATA SECURITY CONTROLS AND COMPLIANCE REQUIREMENTSSUMMARY
DOMAIN 3: Security Architecture and Engineering
RESEARCH, IMPLEMENT, AND MANAGE ENGINEERING PROCESSES USING SECURE DESIGN PRINCIPLESUNDERSTAND THE FUNDAMENTAL CONCEPTS OF SECURITY MODELSSELECT CONTROLS BASED UPON SYSTEMS SECURITY REQUIREMENTSUNDERSTAND SECURITY CAPABILITIES OF INFORMATION SYSTEMSASSESS AND MITIGATE THE VULNERABILITIES OF SECURITY ARCHITECTURES, DESIGNS, AND SOLUTION ELEMENTSSELECT AND DETERMINE CRYPTOGRAPHIC SOLUTIONSUNDERSTAND METHODS OF CRYPTANALYTIC ATTACKSAPPLY SECURITY PRINCIPLES TO SITE AND FACILITY DESIGNDESIGN SITE AND FACILITY SECURITY CONTROLSSUMMARY

DOMAIN 4: Communication and Network Security
ASSESS AND IMPLEMENT SECURE DESIGN PRINCIPLES IN NETWORK ARCHITECTURESSECURE NETWORK COMPONENTSIMPLEMENT SECURE COMMUNICATION CHANNELS ACCORDING TO DESIGNSUMMARY
DOMAIN 5: Identity and Access Management
CONTROL PHYSICAL AND LOGICAL ACCESS TO ASSETSMANAGE IDENTIFICATION AND AUTHENTICATION OF PEOPLE, DEVICES, AND SERVICESFEDERATED IDENTITY WITH A THIRD-PARTY SERVICEIMPLEMENT AND MANAGE AUTHORIZATION MECHANISMSMANAGE THE IDENTITY AND ACCESS PROVISIONING LIFECYCLEIMPLEMENT AUTHENTICATION SYSTEMSSUMMARY
DOMAIN 6: Security Assessment and Testing
DESIGN AND VALIDATE ASSESSMENT, TEST, AND AUDIT STRATEGIESCONDUCT SECURITY CONTROL TESTINGCOLLECT SECURITY PROCESS DATAANALYZE TEST OUTPUT AND GENERATE REPORTCONDUCT OR FACILITATE SECURITY AUDITSSUMMARY
DOMAIN 7: Security Operations
UNDERSTAND AND COMPLY WITH INVESTIGATIONSCONDUCT LOGGING AND MONITORING ACTIVITIESPERFORM CONFIGURATION MANAGEMENTAPPLY FOUNDATIONAL SECURITY OPERATIONS CONCEPTSAPPLY RESOURCE PROTECTIONCONDUCT INCIDENT MANAGEMENTOPERATE AND MAINTAIN DETECTIVE AND PREVENTATIVE MEASURESIMPLEMENT AND SUPPORT PATCH AND VULNERABILITY MANAGEMENTUNDERSTAND AND PARTICIPATE IN CHANGE MANAGEMENT PROCESSESIMPLEMENT RECOVERY STRATEGIESIMPLEMENT DISASTER RECOVERY PROCESSESTEST DISASTER RECOVERY PLANSPARTICIPATE IN BUSINESS CONTINUITY PLANNING AND EXERCISESIMPLEMENT AND MANAGE PHYSICAL SECURITYADDRESS PERSONNEL SAFETY AND SECURITY CONCERNSSUMMARY
DOMAIN 8: Software Development Security
UNDERSTAND AND INTEGRATE SECURITY IN THE SOFTWARE DEVELOPMENT LIFE CYCLE (SDLC)IDENTIFY AND APPLY SECURITY CONTROLS IN SOFTWARE DEVELOPMENT ECOSYSTEMSASSESS THE EFFECTIVENESS OF SOFTWARE SECURITYASSESS SECURITY IMPACT OF ACQUIRED SOFTWAREDEFINE AND APPLY SECURE CODING GUIDELINES AND STANDARDSSUMMARY
Index
End User License Agreement

Overview

The only official, comprehensive reference guide to the CISSP

Thoroughly updated for 2021 and beyond, this is the authoritative common body of knowledge (CBK) from (ISC)2 for information security professionals charged with designing, engineering, implementing, and managing the overall information security program to protect organizations from increasingly sophisticated attacks. Vendor neutral and backed by (ISC)2, the CISSP credential meets the stringent requirements of ISO/IEC Standard 17024.

This CBK covers the current eight domains of CISSP with the necessary depth to apply them to the daily practice of information security. Revised and updated by a team of subject matter experts, this comprehensive reference covers all of the more than 300 CISSP objectives and sub-objectives in a structured format with:

Common and good practices for each objective
Common vocabulary and definitions
References to widely accepted computing standards
Highlights of successful approaches through case studies

Whether you've earned your CISSP credential or are looking for a valuable resource to help advance your security career, this comprehensive guide offers everything you need to apply the knowledge of the most recognized body of influence in information security

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

ISC2 CISSP Certified Information Systems Security Professional Official Study Guide, 10th Edition

Publisher Resources

ISBN: 9781119789994Purchase Link

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills