ISC2 CISSP Certified Information Systems Security Professional Official Study Guide, Tenth Edition
- 25h 49m
- Darril Gibson, James Michael Stewart, Mike Chapple
- John Wiley & Sons (US)
- 2024
CISSP Study Guide - fully updated for the 2024 CISSP Body of Knowledge
ISC2 Certified Information Systems Security Professional (CISSP) Official Study Guide, 10th Edition has been completely updated based on the latest 2024 CISSP Detailed Content Outline. This bestselling Sybex Study Guide covers 100% of the CISSP objectives. You'll prepare smarter and faster with Sybex thanks to expert content, knowledge from our real-world experience, access to the Sybex online interactive learning environment, and much more. Reinforce what you've learned with key topic Study Essentials and chapter review questions.
The book’s co-authors bring decades of experience as cybersecurity practitioners and educators, integrating real-world expertise with the practical knowledge you'll need to successfully prove your CISSP mastery. Combined, they've taught cybersecurity concepts to millions of students through their books, video courses, and live training programs.
Along with the book, you also get access to Sybex's superior online interactive learning environment that includes:
- Over 900 practice test questions with complete answer explanations. This includes all of the questions from the book plus four additional online-only practice exams, each with 125 unique questions. You can use the online-only practice exams as full exam simulations. Our questions will help you identify where you need to study more.
- More than 1000 Electronic Flashcards to reinforce your learning and give you last-minute test prep
- A searchable glossary in PDF to give you instant access to the key terms you need to know
- Audio Review. Author Mike Chapple reads the Study Essentials for each chapter providing you with more than 2 hours of up-to-date audio review for yet another way to reinforce your knowledge as you prepare.
Coverage of all of the CISSP topics in the book means you'll be ready for:
- Security and Risk Management
- Asset Security
- Security Architecture and Engineering
- Communication and Network Security
- Identity and Access Management (IAM)
- Security Assessment and Testing
- Security Operations
- Software Development Security
About the Author
James Michael Stewart, CISSP, CEH, CHFI, ECSA, CND, ECIH, CySA+, PenTest+, CASP+, Security+, Network+, A+, CISM, and CFR, has been writing and training for more than 25 years, with a current focus on security. He has been writing and teaching CISSP materials since 2002. He is the author of and contributor to more than 75 books on security certifications.
Mike Chapple, PhD, CISSP, is Teaching Professor of IT, Analytics, and Operations at the University of Notre Dame’s Mendoza College of Business. He is a cybersecurity professional and educator with over 25 years of experience. Mike provides cybersecurity certification resources at his website, CertMike.com.
Darril Gibson, CISSP, Security+, CASP, is the CEO of YCDA (short for You Can Do Anything), and he has authored or coauthored more than 40 books. Darril regularly writes, consults, and teaches on a wide variety of technical and security topics and holds several certifications.
In this Book
-
Introduction
-
Security Governance Through Principles and Policies
-
Personnel Security and Risk Management Concepts
-
Business Continuity Planning
-
Laws, Regulations, and Compliance
-
Protecting Security of Assets
-
Cryptography and Symmetric Key Algorithms
-
PKI and Cryptographic Applications
-
Principles of Security Models, Design, and Capabilities
-
Security Vulnerabilities, Threats, and Countermeasures
-
Physical Security Requirements
-
Secure Network Architecture and Components
-
Secure Communications and Network Attacks
-
Managing Identity and Authentication
-
Controlling and Monitoring Access
-
Security Assessment and Testing
-
Managing Security Operations
-
Preventing and Responding to Incidents
-
Disaster Recovery Planning
-
Investigations and Ethics
-
Software Development Security
-
Malicious Code and Application Attacks
