The CISSP Study Hub
The CISSP certification is the gold standard in information security.
Whether you're a career changer entering cybersecurity, an experienced professional seeking validation, or retaking the exam, this hub gives you structured, practical guidance across all eight domains of the CISSP Common Body of Knowledge (CBK).
Each domain guide breaks down complex security concepts into real-world explanations, exam-focused insights, and the strategic thinking you need to pass the exam and lead security teams.
- Computerized Adaptive Test (CAT) format
- 100 to 150 questions
- 3 hours maximum
- 700 out of 1000 to pass
- 5 years of professional experience required (or 4 years + degree)
Domain 1: Security and Risk Management (16%)
The largest domain and the foundation everything else builds on. Covers governance, compliance, risk management, business continuity, and the legal and ethical frameworks that shape how organizations protect themselves.
Explore Domain 1 →Domain 2: Asset Security (10%)
Focuses on protecting what matters most: your data and assets. Covers classification, ownership, privacy, data lifecycle management, and the controls that keep sensitive information secure from creation to destruction.
Explore Domain 2 →Domain 3: Security Architecture and Engineering (13%)
The technical backbone of security. Covers secure design principles, security models, cryptography, physical security, and how to build systems that resist, detect, and recover from attacks.
Explore Domain 3 →Domain 4: Communication and Network Security (14%)
All about securing the pipes. Covers network architecture, secure protocols, wireless security, firewalls, VPNs, and defending against network-based attacks in modern and hybrid environments.
Explore Domain 4 →Domain 5: Identity and Access Management (13%)
Controls who gets in and what they can do. Covers authentication, authorization, identity governance, access control models, SSO, federation, and defending against identity-based attacks.
Explore Domain 5 →Domain 6: Security Assessment and Testing (12%)
The domain of trust but verify. Covers vulnerability assessments, penetration testing, security audits, log analysis, metrics, and building a testing program that actually finds problems before attackers do.
Explore Domain 6 →Domain 7: Security Operations (13%)
Where security meets daily reality. Covers incident response, logging and monitoring, vulnerability management, change management, disaster recovery, and keeping operations secure without burning out your team.
Explore Domain 7 →Domain 8: Software Development Security (10%)
Security built into software from day one. Covers secure SDLC, DevSecOps, secure coding, threat modeling, third-party risk, and making sure applications do not become your weakest link.
Explore Domain 8 →Start with Domain 1 and work your way through. Each domain builds on the ones before it, creating a complete understanding of how security professionals think and operate.
The CISSP is not about memorizing facts. It's about developing the mindset to make sound security decisions under pressure. Each article in this hub is built to give you real understanding, not just exam answers.
Good luck on your journey to certification.