Certified Information Systems Security Professional

Identify And Classify

Asset Ownership

Protect Privacy

Asset Retention

Data Security Controls

Information / Asset Handling

Engineering Processes And Secure Design

Concepts Of Security Models

Controls Based On Security Requirements

Security Capabilities Of Information Systems

Assess And Mitigate Vulnerabilities

Assess And Mitigate Vulnerabilities – Web

Assess And Mitigate Vulnerabilities – Mobile

Assess And Mitigate Vulnerabilities – Embedded

Apply Cryptography

Site And Facility Security Principles

Site And Facility Security Controls

Secure Design And Network Architecture

Secure Network Components

Secure Communication Design

Physical And Logical Access

Manage Identification And Authentication

Integrate Identity As A Third-Party Service

Implement And Manage Authorization

Manage Identity And Access Life Cycle

Assessment, Test, And Audit Strategies

Security Control Testing

Security Process Data

Analyze Test Output And Generate Reports

Conduct And Facilitate Security Audit

Investigations

Investigation Team

Logging And Monitoring Activities

Provisioning Resources

Security Operations Concepts

Protection Techniques

Incident Management

Detective And Preventative Measures

Patch And Vulnerability Management

Change Management Processes

Implement Recovery Strategies

Implement Disaster Recovery

Test Disaster Recovery

Implement And Manage Physical Security

Personnel Safety And Security

Software Development Life Cycle

Security Controls In Development

Assess Software Security Effectiveness

Security Impact Of Acquired Software

Secure Coding Guidelines And Standards