CISSP

What does the CISSP exam cover, on one page?

3 October 2026Credential Press2 min read

The CISSP exam outline effective 15 April 2024 on one page: eight domains, their weights and what each one covers. The mnemonic at the bottom gives you the eight in order.

What does the CISSP exam cover, on one page?

CISSP exam outline, effective 15 April 2024

1 Security and Risk Management (16%)

Ethics and security concepts
Governance, legal and compliance
Policy, continuity, personnel
Risk, threat modeling, supply chain

2 Asset Security (10%)

Classify and handle assets
Provision securely; data lifecycle
Retention and data controls

3 Security Architecture and Engineering (13%)

Secure design and security models
Cryptography and cryptanalysis
Site and facility security

4 Communication and Network Security (13%)

Secure network architecture
Network components
Secure channels

5 Identity and Access Management (13%)

Physical and logical access
Authentication and federation
Authorization; provisioning lifecycle

6 Security Assessment and Testing (12%)

Test and audit strategy
Control testing
Reports and audits

7 Security Operations (13%)

Investigations and logging
Incidents, patching, change
Recovery, DR and BC
Physical and personnel safety

8 Software Development Security (10%)

Security in the SDLC
Controls in dev ecosystems
Acquired software; secure coding

Smart Analysts Secure Company Information So Systems Survive

S Security and Risk Management
A Asset Security
S Security Architecture and Engineering
C Communication and Network Security
I Identity and Access Management
S Security Assessment and Testing
S Security Operations
S Software Development Security

CISSP mind map

Embed it on your site, wiki or study group page:

<a href="https://credentialpress.com/guides/cissp-mind-map"><img src="https://credentialpress.com/img/mindmaps/cissp.png" alt="CISSP mind map" width="1600" height="1131"></a>

How do you use the mind map?

Print the PDF and pin it where you study, or open the Markdown in Obsidian (a mind map plugin draws it from the headings). Say the mnemonic until you can list the domains in order, then add one item from memory under each branch. The quiz tells you which branch to revisit.

Where next?

Also free: the CISSP interview questions and the CISSP 10-question quiz, plus every other credential on our study tools page. For the full syllabus, the CISSP Exam Guide and the CISSP Practice Questions go domain by domain.

Frequently asked questions

What are the CISSP exam domains?

1 Security and Risk Management (16%); 2 Asset Security (10%); 3 Security Architecture and Engineering (13%); 4 Communication and Network Security (13%); 5 Identity and Access Management (13%); 6 Security Assessment and Testing (12%); 7 Security Operations (13%); 8 Software Development Security (10%).

Is there a mnemonic for the CISSP domains?

Smart Analysts Secure Company Information So Systems Survive: S for Security and Risk Management, A for Asset Security, S for Security Architecture and Engineering, C for Communication and Network Security, I for Identity and Access Management, S for Security Assessment and Testing, S for Security Operations, S for Software Development Security.

Can I use the CISSP mind map in Obsidian?

Yes. Download the Markdown file and open it in Obsidian; a mind map plugin draws it from the headings. A printable PDF and a PNG are free too.