Lesson 1: Security and Risk Management

• Topic A: Security Concepts
• Topic B: Security Governance Principles
• Topic C: Compliance
• Topic D: Professional Ethics
• Topic E: Security Documentation
• Topic F: Risk Management
• Topic G: Threat Modeling
• Topic H: Risk Response
• Topic I: Business Continuity Plan Fundamentals
• Topic J: Acquisition Strategy and Practice
• Topic K: Personnel Security Policies
• Topic L: Security Awareness and Training

Lesson 2: Asset Security

• Topic A: Asset Classification
• Topic B: Secure Data Handling
• Topic C: Resource Provisioning and Protection
• Topic D: Manage Data Lifecycle
• Topic E: Asset Retention
• Topic F: Data Security Controls

Lesson 3: Security Architecture and Engineering

• Topic A: Security in the Engineering Lifecycle
• Topic B: System Component Security
• Topic C: Security Models
• Topic D: Controls and Countermeasures in Enterprise Security
• Topic E: Information System Security Capabilities
• Topic F: Design and Architecture Vulnerability Mitigation
• Topic G: Vulnerability Mitigation in Emerging Technologies
• Topic H: Cryptography Concepts
• Topic I: Cryptography Techniques
• Topic J: Cryptanalytic Attacks
• Topic K: Site and Facility Design for Physical Security
• Topic L: Physical Security Implementation in Sites and Facilities

Lesson 4: Communication and Network Security

• Topic A: Network Protocol Security
• Topic B: Network Components Security
• Topic C: Communication Channel Security
• Topic D: Network Attack Mitigation

Lesson 5: Identity and Access Management

• Topic A: Physical and Logical Access Control
• Topic B: Identification and Authentication
• Topic C: Identity as a Service
• Topic D: Authorization Mechanisms
• Topic E: Access Control Attack Mitigation

Lesson 6: Security Assessment and Testing

• Topic A: System Security Control Testing
• Topic B: Software Security Control Testing
• Topic C: Security Process Data Collection
• Topic D: Audits

Lesson 7: Security Operations

• Topic A: Security Operations Concepts
• Topic B: Change Management
• Topic C: Physical Security
• Topic D: Personnel Security
• Topic E: Detective and Preventive Measures
• Topic F: Patch and Vulnerability Management
• Topic G: Logging and Monitoring
• Topic H: Incident Response
• Topic I: Investigations
• Topic J: Disaster Recovery Planning
• Topic K: Disaster Recovery Strategies
• Topic L: Disaster Recovery Implementation

Lesson 8: Software Development Security

• Topic A: Security Principles in the System Lifecycle
• Topic B: Security Principles in the Software Development Lifecycle
• Topic C: Security Controls in the Development Environment
• Topic D: Database Security in Software Development
• Topic E: Software Security Effectiveness Assessment

Appendix A: Mapping Course Content to (ISC)2 ® Certified Information Systems Security Professional (CISSP®) April 2021 Certification Exam Outline

Appendix B: Supplemental Information