---
title: CISSP mind map
source: https://credentialpress.com/guides/cissp-mind-map
tags: [cissp, mindmap]
---

# CISSP exam outline, effective 15 April 2024

## 1 Security and Risk Management (16%)
- Ethics and security concepts
- Governance, legal and compliance
- Policy, continuity, personnel
- Risk, threat modeling, supply chain

## 2 Asset Security (10%)
- Classify and handle assets
- Provision securely; data lifecycle
- Retention and data controls

## 3 Security Architecture and Engineering (13%)
- Secure design and security models
- Cryptography and cryptanalysis
- Site and facility security

## 4 Communication and Network Security (13%)
- Secure network architecture
- Network components
- Secure channels

## 5 Identity and Access Management (13%)
- Physical and logical access
- Authentication and federation
- Authorization; provisioning lifecycle

## 6 Security Assessment and Testing (12%)
- Test and audit strategy
- Control testing
- Reports and audits

## 7 Security Operations (13%)
- Investigations and logging
- Incidents, patching, change
- Recovery, DR and BC
- Physical and personnel safety

## 8 Software Development Security (10%)
- Security in the SDLC
- Controls in dev ecosystems
- Acquired software; secure coding

## Mnemonic: Smart Analysts Secure Company Information So Systems Survive
- **S** Security and Risk Management
- **A** Asset Security
- **S** Security Architecture and Engineering
- **C** Communication and Network Security
- **I** Identity and Access Management
- **S** Security Assessment and Testing
- **S** Security Operations
- **S** Software Development Security