cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
mianwaseemabbas
Viewer III

Information security Domains

Can anyone on in this community direct me to a set of Information Security domain what are these domain please anyone suggest its title 

9 Replies
mgorman
Contributor II

The domains are the areas of knowledge considered for the various certifications, so they are different, depending on what cert you are looking at.  For CISSP, you should look at the general info to get started, it will lead you to the domains.  If you are looking for a different cert, just search that one on the ISC2 page, and you'll find the same sort of information.

 

https://www.isc2.org/Certifications/CISSP

 

 

Chuxing
Community Champion

Domain 1: Security and Risk Management

 

Domain 2: Asset Security

Domain 3: Security Architecture and Engineering

Domain 4: Communication and Network Security

Domain 5: Identity and Access Management (IAM)

Domain 6: Security Assessment and Testing

Domain 7: Security Operations

Domain 8: Software Development Security


____________________________________
Chuxing Chen, Ph.D., CISSP, PMP
Tariq
Newcomer I

Can any one answer me for yhis question please?
Can I choose two domains for the CISSP exam? Or do i have to take the exam for all of them?
The reason i am asking is because it says you should profession two domains! But i doesn't say hiw is it done in the exam!
mgorman
Contributor II

The exam covers all 10.  The CISSP is a very broad certification, intending to certify that you have a broad knowledge of the entirety of Information Security.  If that is daunting (and it is), you might look at ISC2 specialties, like Cloud, Software (CCSP, CSSLP), etc. to narrow the focus of what you would be tested on.  Or start with certs from other vendors, like Security+, which are lower level.  CISSP is regarded as the highest, or one of the few highest, overall, cybersecurity certs out there.  It does take a considerable amount of knowledge, some of which, you can be almost guaranteed, you have not seen professionally.  The requirement you point out for two domains is the experience requirement.  You must have a verifiable amount of experience in at least 2 of the 10 domains, as well as pass the exam on all 10.

Tariq
Newcomer I

Thank you for your comprehensive answer.
AlecTrevelyan
Community Champion


@mgorman wrote:

The exam covers all 10.  The CISSP is a very broad certification, intending to certify that you have a broad knowledge of the entirety of Information Security.  If that is daunting (and it is), you might look at ISC2 specialties, like Cloud, Software (CCSP, CSSLP), etc. to narrow the focus of what you would be tested on.  Or start with certs from other vendors, like Security+, which are lower level.  CISSP is regarded as the highest, or one of the few highest, overall, cybersecurity certs out there.  It does take a considerable amount of knowledge, some of which, you can be almost guaranteed, you have not seen professionally.  The requirement you point out for two domains is the experience requirement.  You must have a verifiable amount of experience in at least 2 of the 10 domains, as well as pass the exam on all 10.


The CISSP curriculum was consolidated from 10 domains down to 8 mid 2015 - the 8 current domains were posted above.

 

mianwaseemabbas
Viewer III

Thank you chuxing and all others i got great help from your answer.
Chuxing
Community Champion

@mianwaseemabbas @Tariq 

There are tons of posts here in this forum, describing personal exam prep experiences.

 

In my view, the most important first step is to perform a thorough self assessment on your knowledge and experiences against the domains, figuring out your strengths and weaknesses. This assignment should provide you the basis for exam preparation planning.

 

Best,


____________________________________
Chuxing Chen, Ph.D., CISSP, PMP
AmmarHasayen
Viewer II

CISSP domains are the objectives covered in the exam and each domain gets a share of questions in the exam. Have a look at this https://blog.ahasayen.com/cissp-exam-day/