ISC2 CISSP Study Roadmap

Domain 1: Security and Risk Management (CIA, governance, compliance, ethics)

Domain 1: Risk management, BCP fundamentals, legal/regulatory

Domain 2: Asset Security (Data classification, ownership, privacy, retention)

Domain 3: Security Architecture (Security models, evaluation criteria, vulnerabilities)

Domain 4: Communication & Network Security (OSI model, protocols, network attacks)

Domain 5: IAM (Access control models, identity management, authentication)

Domain 6: Security Assessment (Vulnerability assessment, penetration testing, auditing)

Domain 7: Security Operations (Incident management, forensics, disaster recovery)

Domain 7: Operations security, change management, physical security

Domain 8: Software Development Security (SDLC, application security, databases)

Cross-domain review: Practice CAT-format questions, identify weak domains

Final review: Timed practice exams, focus on weak areas, exam-day preparation

Review and practice

Review and practice

Review and practice

Review and practice