Appearance
← CISSP syllabus chapters

Domain 3 · Objective reference 3.8 · Chapter 26 of 62

Select and design a secure site

About 5 minutes · Current ISC2 outline effective 15 April 2024; the announced 15 April 2027 replacement requires separate mapping

Session only. Enable saving or download a backup from this course’s hub.

Completion is self-reported and does not certify understanding.

See it · Try it · Recall it

Picture the topic

Remember this: Start outside the building and work toward the asset.

CISSP · 3.8Layered architecture
Layered architectureComplementary protection layers are shown in perspective. A layer is not proof of complete protection or a universal product boundary. Site: Evaluate location hazards and dependencies. Perimeter: Control approach and entry points. Internal zones: Separate sensitive spaces and functionsSite01Perimeter02Internal zones03
Complementary protection layers are shown in perspective. A layer is not proof of complete protection or a universal product boundary.
Visual preferences

Reduced-motion preferences are respected. Highlights guide attention; they do not represent measured traffic or elapsed time.

Explore the anchors

Evaluate location hazards and dependencies.

Concept matching activity

Match this task or description to its concept:

Control approach and entry points.

Choose a concept before checking the explanation.

A quick way to study this topic
  1. Hide the explanation and redraw these three anchors from memory.
  2. Explain the difference between the anchors in your own words.
  3. Apply the distinction to the worked example below. Check the full lesson for assumptions and exceptions.
  4. Recall it again tomorrow, then after a few days. A memory hint is a retrieval cue, not a replacement for understanding.

Original academy illustrations and fictional exercises. These are learning simulations, not a real virtual machine, network assessment or measure of job readiness. Activities reset when you leave or reload; they do not change quiz scores.

What this chapter explains

Concepts and mechanisms

Facility design begins with business and safety requirements, environmental hazards, access needs and service dependencies. Location can expose systems to flooding, fire, utility interruption or access constraints. Physical boundaries, public and restricted areas, deliveries and emergency evacuation need a coherent design. Site selection should consider consequence and feasibility, not merely equipment space or rental cost.

Design, evidence and tradeoffs

Layer perimeter, building, room and equipment controls with approved roles and monitoring. Examine common utility, communications and staffing dependencies when claiming site independence. Safety and accessibility obligations constrain control choices; an access design must not create an unacceptable evacuation hazard. Integrate facilities, security and operations owners and validate maintenance and emergency conditions, not only ordinary entry.

Worked example

Two recovery sites use different buildings but share a flood zone and power dependency, limiting their independence for that scenario.

Check your understanding

Why can two physically separate sites still share one recovery risk?

Show explanation

The relevant environmental, utility, communication or operational dependency may affect both locations simultaneously.

Source and study boundary

Official syllabus source. The reference identifies the topic being taught. Explanations and examples are original academy material; a topic link does not establish independent approval or sufficient exam mastery.