Appearance
← CISSP course hub

Syllabus-first teaching

CISSP syllabus chapters

Current ISC2 outline effective 15 April 2024; the announced 15 April 2027 replacement requires separate mapping · Source checked 2026-10-24

62 topic chapters teach concepts before asking you to apply them. Explore the visual model and memory hint, try the concept activity, then read the explanations and worked example. Selected topics also include interactive local simulations.

Sixty-two individually referenced chapters address the current top-level objective list. A chapter’s presence does not establish exhaustive subtopic depth, practical competence, independent approval or exam readiness. Use the remaining-gap information and official references for further study. The uploaded April 2024 syllabus was compared on October 24, 2026; 25 chapters received additional subtopic explanations. Misplaced or duplicated source bullets were not treated as new objectives. Chapter progress is separate from the earlier domain-overview progress.

Official syllabus reference · Edition and coverage boundaries

Your CISSP chapters progress

Loading progress…

Saving is off; progress stays in this course session only. No academy account or cloud sync. Each course has separate data.

Individual quiz answers remain in memory only. Completed score summaries can be saved and backed up. Storage details

62 matching lessons

  1. Domain 1 · About 5 minutes

    1.1 · Professional ethics and competent practice

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  2. Domain 1 · About 5 minutes

    1.2 · Security properties and their relationships

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  3. Domain 1 · About 5 minutes

    1.3 · Governance, business alignment and assurance

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  4. Domain 1 · About 5 minutes

    1.4 · Legal, contractual, privacy and intellectual-property context

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  5. Domain 1 · About 5 minutes

    1.5 · Investigation types and evidence requirements

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  6. Domain 1 · About 5 minutes

    1.6 · Policies, standards, procedures and guidance

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  7. Domain 1 · About 5 minutes

    1.7 · Business impact analysis and continuity requirements

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  8. Domain 1 · About 5 minutes

    1.8 · Personnel security through employment and contracting

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  9. Domain 1 · About 5 minutes

    1.9 · Risk methods, treatments and uncertainty

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  10. Domain 1 · About 5 minutes

    1.10 · Threat modeling methods and trust boundaries

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  11. Domain 1 · About 5 minutes

    1.11 · Supply-chain integrity and acquired components

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  12. Domain 1 · About 5 minutes

    1.12 · Awareness, training, education and effectiveness

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  13. Domain 2 · About 5 minutes

    2.1 · Classify information and assets

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  14. Domain 2 · About 5 minutes

    2.2 · Set asset-handling requirements

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  15. Domain 2 · About 5 minutes

    2.3 · Provision assets with ownership and secure defaults

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  16. Domain 2 · About 5 minutes

    2.4 · Manage collection, use, retention and destruction

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  17. Domain 2 · About 5 minutes

    2.5 · Retain assets and manage end-of-support exposure

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  18. Domain 2 · About 5 minutes

    2.6 · Tailor data protection to state and requirements

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  19. Domain 3 · About 5 minutes

    3.1 · Engineer with explicit trust and failure assumptions

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  20. Domain 3 · About 5 minutes

    3.2 · Confidentiality, integrity and conflict-of-interest models

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  21. Domain 3 · About 5 minutes

    3.3 · Select controls from system requirements

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  22. Domain 3 · About 5 minutes

    3.4 · Memory protection, hardware trust and system capabilities

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  23. Domain 3 · About 5 minutes

    3.5 · Assess weaknesses across architecture types

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  24. Domain 3 · About 5 minutes

    3.6 · Select cryptography and manage a trustworthy PKI

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  25. Domain 3 · About 5 minutes

    3.7 · Understand cryptanalytic and implementation attack assumptions

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  26. Domain 3 · About 5 minutes

    3.8 · Select and design a secure site

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  27. Domain 3 · About 5 minutes

    3.9 · Protect facilities, media, power and the environment

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  28. Domain 3 · About 5 minutes

    3.10 · Manage security across the system lifecycle

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  29. Domain 4 · About 5 minutes

    4.1 · Design network architecture with measurable boundaries

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  30. Domain 4 · About 5 minutes

    4.2 · Protect network infrastructure and endpoints

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  31. Domain 4 · About 5 minutes

    4.3 · Secure remote, collaboration and third-party channels

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  32. Domain 5 · About 5 minutes

    5.1 · Control access to physical and logical assets

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  33. Domain 5 · About 5 minutes

    5.2 · Design identity proofing and authentication

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  34. Domain 5 · About 5 minutes

    5.3 · Federation with external identity services

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  35. Domain 5 · About 5 minutes

    5.4 · Authorization models, decisions and enforcement

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  36. Domain 5 · About 5 minutes

    5.5 · Provision, review, transfer and remove access

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  37. Domain 5 · About 5 minutes

    5.6 · Implement authentication systems without weakening trust

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  38. Domain 6 · About 5 minutes

    6.1 · Design an assessment, test and audit strategy

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  39. Domain 6 · About 5 minutes

    6.2 · Choose and execute security-control tests

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  40. Domain 6 · About 5 minutes

    6.3 · Collect reliable security-process evidence

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  41. Domain 6 · About 5 minutes

    6.4 · Analyze test output and report actionable findings

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  42. Domain 6 · About 5 minutes

    6.5 · Conduct and facilitate scoped security audits

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  43. Domain 7 · About 5 minutes

    7.1 · Support investigations and evidence handling

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  44. Domain 7 · About 5 minutes

    7.2 · Operate logging, monitoring and threat analysis

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  45. Domain 7 · About 5 minutes

    7.3 · Provision and maintain an approved configuration state

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  46. Domain 7 · About 5 minutes

    7.4 · Apply operational least privilege and accountability

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  47. Domain 7 · About 5 minutes

    7.5 · Protect operational resources and media

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  48. Domain 7 · About 5 minutes

    7.6 · Manage incidents from detection to improvement

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  49. Domain 7 · About 5 minutes

    7.7 · Maintain prevention, detection and controlled deception

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  50. Domain 7 · About 5 minutes

    7.8 · Prioritize, patch and verify vulnerabilities

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  51. Domain 7 · About 5 minutes

    7.9 · Govern normal and emergency changes

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  52. Domain 7 · About 5 minutes

    7.10 · Choose backup, recovery-site and resilience strategies

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  53. Domain 7 · About 5 minutes

    7.11 · Execute and validate disaster recovery

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  54. Domain 7 · About 5 minutes

    7.12 · Select and evaluate recovery tests

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  55. Domain 7 · About 5 minutes

    7.13 · Participate in business continuity planning

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  56. Domain 7 · About 5 minutes

    7.14 · Operate physical security controls

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  57. Domain 7 · About 5 minutes

    7.15 · Protect personnel in routine and emergency operations

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  58. Domain 8 · About 5 minutes

    8.1 · Integrate security into software lifecycle methods

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  59. Domain 8 · About 5 minutes

    8.2 · Secure repositories, builds, runtimes and testing tools

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  60. Domain 8 · About 5 minutes

    8.3 · Assess whether software security controls work

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  61. Domain 8 · About 5 minutes

    8.4 · Evaluate acquired and managed software

    Concepts and mechanisms

    Not marked complete · Not bookmarked

  62. Domain 8 · About 5 minutes

    8.5 · Apply secure coding and API design standards

    Concepts and mechanisms

    Not marked complete · Not bookmarked

Use the practice bank after studying

The existing question bank is supporting practice, not a substitute for these chapters or evidence of certification readiness. Its questions are not an exhaustive test of every new chapter.

Open CISSP practice