CISSP For Dummies

Some say that a CISSP candidate requires a breadth of knowledge many miles across but only a few inches deep. To embellish on this statement, we believe that a CISSP candidate is more like the Great Wall of China, with a knowledge base extending over 3,500 miles — with maybe a few holes here and there, stronger in some areas than others, but nonetheless one of the Seven Wonders of the Modern World.

The problem with lots of CISSP preparation materials is defining how high (or deep) the Great Wall is. Some material overwhelms and intimidates CISSP candidates, leading them to believe that the wall is as high as it is long. Other study materials are perilously brief and shallow, giving the unsuspecting candidate a false sense of confidence while attempting to step over the Great Wall, careful not to stub a toe. To help you avoid either misstep, CISSP For Dummies, 8th Edition, answers the question “What level of knowledge and experience must a CISSP candidate possess to succeed on the CISSP exam?”

Our goal in this book is simple: to help you prepare for and pass the CISSP examination so that you can join the ranks of respected certified security professionals who dutifully serve and protect organizations and industries around the world. Although we’ve stuffed this book chock-full of good information, we don’t expect it to be a weighty desktop reference on the shelf of every security professional — although we certainly wouldn’t object.

Also, we don’t intend this book to be an all-purpose, be-all-and-end-all, onestop shop with all the answers to life’s great mysteries. Given the broad base of knowledge required for the CISSP certification, we strongly recommend that you use multiple resources to prepare for the exam and study as much relevant information as your time and resources allow. CISSP For Dummies, 8th Edition, provides the framework and the blueprint for your study effort and sufficient information to help you pass the exam, but by itself, it won’t make you an information security expert. That takes knowledge, skills, and on-the-job experience!

Finally, as a security professional, earning your CISSP certification is only the beginning. Business and technology, which have associated risks and vulnerabilities, require us, as security professionals, to press forward constantly, consuming vast volumes of knowledge and information in a constant tug-of-war against our adversaries — lone wolves, cybercriminal organizations, and well-funded nationstates. Earning your CISSP is an outstanding achievement and an essential hallmark in a lifetime of continuous learning.

Part 1: Getting Started with CISSP Certification

CHAPTER 1: ISC2 and the CISSP Certification

CHAPTER 2: Putting Your Certification to Good Use

Part 2: Certification Domains

CHAPTER 3: Security and Risk Management

CHAPTER 4: Asset Security

CHAPTER 5: Security Architecture and Engineering

CHAPTER 6: Communication and Network Security

CHAPTER 7: Identity and Access Management

CHAPTER 8: Security Assessment and Testing

CHAPTER 9: Security Operations

CHAPTER 10: Software Development Security

Part 3: The Part of Tens

CHAPTER 11: Ten Ways to Prepare for the Exam

CHAPTER 12: Ten Test-Day Tips