ISC2 CISSP Study Roadmap

Domain 1: Security and Risk Management — CIA, governance, compliance, ethics

Domain 1: Risk management, BCP fundamentals, legal/regulatory

Domain 2: Asset Security — Data classification, ownership, privacy, retention

Domain 3: Security Architecture — Security models, evaluation criteria, vulnerabilities

Domain 4: Communication & Network Security — OSI model, protocols, network attacks

Domain 5: IAM — Access control models, identity management, authentication

Domain 6: Security Assessment — Vulnerability assessment, penetration testing, auditing

Domain 7: Security Operations — Incident management, forensics, disaster recovery

Domain 7: Operations security, change management, physical security

Domain 8: Software Development Security — SDLC, application security, databases

Cross-domain review: Practice CAT-format questions, identify weak domains

Final review: Timed practice exams, focus on weak areas, exam-day preparation

Review and practice — Week 13

Review and practice — Week 14

Review and practice — Week 15

Review and practice — Week 16