Lesson 1: Security and Risk Management
Topic A: Security Concepts
Topic B: Security Governance Principles
Topic C: Compliance
Topic D: Professional Ethics
Topic E: Security Documentation
Topic F: Risk Management
Topic G: Threat Modeling
Topic H: Risk Response
Topic I: Business Continuity Plan Fundamentals
Topic J: Acquisition Strategy and Practice
Topic K: Personnel Security Policies
Topic L: Security Awareness and Training

Lesson 2: Asset Security
Topic A: Asset Classification
Topic B: Secure Data Handling
Topic C: Resource Provisioning and Protection
Topic D: Manage Data Lifecycle
Topic E: Asset Retention
Topic F: Data Security Controls

Lesson 3: Security Architecture and Engineering
Topic A: Security in the Engineering Lifecycle
Topic B: System Component Security
Topic C: Security Models
Topic D: Controls and Countermeasures in Enterprise Security
Topic E: Information System Security Capabilities
Topic F: Design and Architecture Vulnerability Mitigation
Topic G: Vulnerability Mitigation in Emerging Technologies
Topic H: Cryptography Concepts
Topic I: Cryptography Techniques
Topic J: Cryptanalytic Attacks
Topic K: Site and Facility Design for Physical Security
Topic L: Physical Security Implementation in Sites and Facilities

Lesson 4: Communication and Network Security
Topic A: Network Protocol Security
Topic B: Network Components Security
Topic C: Communication Channel Security
Topic D: Network Attack Mitigation

Lesson 5: Identity and Access Management
Topic A: Physical and Logical Access Control
Topic B: Identification and Authentication
Topic C: Identity as a Service
Topic D: Authorization Mechanisms
Topic E: Access Control Attack Mitigation

Lesson 6: Security Assessment and Testing
Topic A: System Security Control Testing
Topic B: Software Security Control Testing
Topic C: Security Process Data Collection
Topic D: Audits

Lesson 7: Security Operations
Topic A: Security Operations Concepts
Topic B: Change Management
Topic C: Physical Security
Topic D: Personnel Security
Topic E: Detective and Preventive Measures
Topic F: Patch and Vulnerability Management
Topic G: Logging and Monitoring
Topic H: Incident Response
Topic I: Investigations
Topic J: Disaster Recovery Planning
Topic K: Disaster Recovery Strategies
Topic L: Disaster Recovery Implementation

Lesson 8: Software Development Security
Topic A: Security Principles in the System Lifecycle
Topic B: Security Principles in the Software Development Lifecycle
Topic C: Security Controls in the Development Environment
Topic D: Database Security in Software Development
Topic E: Software Security Effectiveness Assessment

The CISSP exam uses Computerized Adaptive Testing (CAT) for all English exams. CISSP exams in all other languages are administered as linear, fixed-form exams. You can learn more about CISSP CAT.

CISSP CAT Examination Weights