Domain 5

Identity management is the foundation of access control. Learn the identity lifecycle, proofing, and provisioning practices that keep access accurate and auditable.

Access policies fail if provisioning, reviews, and revocation are slow or inconsistent. Learn how to run access control administration that actually works at enterprise scale.

Authentication and authorization are not enough without logging and monitoring. Learn how to design accountability and session controls that support detection, forensics, and compliance.

Excessive access powers many breaches. Learn how least privilege, separation of duties, and privileged access management keep authorization aligned with real job needs.

DAC, MAC, RBAC, and ABAC each solve different access problems. Learn how to choose the right model for your CISSP exam scenarios and real world designs.

Passwords alone are not enough. Learn authentication factors, MFA, biometrics, and FIDO2 so you can match authentication strength to real world risk.

Biometrics promise easy logins, but error rates, template security, and privacy rules make real deployments complex. Learn what CISSP candidates must know about biometric systems.

Attackers increasingly log in instead of breaking in. Learn credential stuffing, pass the hash, Kerberoasting, and the defenses that protect your identity infrastructure.

Directories like Active Directory are high value targets. Learn LDAP basics, encryption, injection risks, and hardening steps so your identity source of truth stays under your control.

IAM technology needs governance to be effective. Learn how access certifications, SoD enforcement, and role engineering turn tools into a coherent identity program.

Physical access is logical access. Learn how badges, biometrics, visitor controls, and anti tailgating measures protect the spaces where your critical systems live.

Single sign on and federation simplify access, but they also centralize risk. Learn how SAML, OIDC, OAuth, and Kerberos work so you can design SSO that is both convenient and secure.