topic Re: Security Governance in CISSP Study Group

Security Governance

SMURF — Thu, 20 Feb 2025 23:34:27 GMT

Hello

I have a question regarding Security Governance?

Is the list below what's covered on the 2025 CISSP exam or some were removed or more needs to be added?

BS 7799

ISO-17799

ISO-2700 Series

COBIT and COSO

OCTAVE

ITIL

Re: Security Governance

dcontesti — Fri, 21 Feb 2025 14:41:37 GMT

I think that our friends in Exam Admin are best suited to answer this question but from my recollection, the exam can be fluid.

What I mean by that is the Common Body of Knowledge, outlines the areas that may be covered at a very high level and does not necessarily go down to the individual technology.

@CBMExamTeam would you be kind enough to provide a more accurate description????

Regards

Re: Security Governance

CBMExamTeam — Fri, 21 Feb 2025 14:59:36 GMT

@SMURF @dcontesti
Hi,

My best advice would be to refer to the CISSP Exam Outline (CISSP - English ) and the current training material.

Although it will involve purchase if you don't already have it, you might also try one of our Official Study Guides https://www.isc2.org/certifications/cissp/cissp-self-study-resources#Textbooks

Wishing you the best with your exam!

Re: Security Governance

nkeaton — Fri, 21 Feb 2025 18:51:02 GMT

I agree with the others that the exam objectives are the best to reference for what need to know. It will not be granular on any framework but definitely should add NIST and COBIT when talking about frameworks.

Re: Security Governance

emb021 — Mon, 24 Feb 2025 16:03:22 GMT

@SMURF ISO/IEC 27001 & 2 supersedes both BS 7799 and ISO 17799.

I would include NIST CSF and the RMF.

Octave is more an IT Risk Management methodology then a security governance one.

I don't think I've ever had to deal with COSO in my work in security & governance. Anything in it I had to deal with as more incorporated into COBIT or SOC reports.

Re: Security Governance

SMURF — Wed, 12 Mar 2025 18:09:54 GMT

Thank you !