Our study material recommendations.

Get the FULL CISSP 2024 bundle - All Videos, Practice Questions, ThorBot, Study Guides, Flashcards, Mnemonics, Glossary & More - Updated for 2024 Exam & 2024 Exam Ready!

💻 34 hours of CISSP videos
📝 4,300 CISSP questions, including:

📝 625 Hard CISSP questions
📝 3,250 Easy/Mid CISSP questions - both as exam emulation and domain tests.
📝 198 Topic quiz questions after each major knowledge area
📝 240 Domain practice questions (30 after each domain)

🤖 ThorBot: Your 24/7 AI study assistant, clarify concepts, tailor your learning, and enhance your CISSP preparation.
📖 CISSP Study Guides from the lectures (290 pages)
📖 A 2,500 word Glossary
📖 2,500 Flashcards
📖 CISSP Quick Sheets (114 pages)
📖 A CISSP study plan
📖 CISSP Mnemonics
🔗 500+ CISSP links
📄 Subtitles in English, Spanish (Latin America), French, Arabic, Chinese, and Hindi
📅 Updated for the 2024 curriculum.
📆 Lifetime or 12-months unlimited access
🏅 Certificate of completion with 34 CPEs/CEUs.
🔓 (Optional +$70) 700 Boson practice questions.

Get the FULL CISSP 2024 bundle - All Videos, Practice Questions, ThorBot, Study Guides, Flashcards, Mnemonics, Glossary & More - Updated for 2024 Exam & 2024 Exam Ready!

💻 34 hours of CISSP videos
📝 4,300 CISSP questions, including:

🤖 ThorBot: Your 24/7 AI study assistant, clarify concepts, tailor your learning, and enhance your CISSP preparation.
📖 CISSP Study Guides from the lectures (290 pages)
📖 A 2,500 word Glossary
📖 2,500 Flashcards
📖 CISSP Quick Sheets for your review sessions (114 pages)
📖 A CISSP study plan
📖 CISSP Mnemonics
🔗 500+ CISSP links
📄 Subtitles in English, Spanish (Latin America), French, Arabic, Chinese, and Hindi
📅 2024 curriculum updated.
📆 Lifetime or 12-months unlimited access
🏅 Certificate of completion with 32 CPEs/CEUs.
🔓 (Optional +$70) 700 Boson practice questions.

Try our FREE 2,500 term IT and Cybersecurity glossary

Get our FREE CISSP/CISM Mnemonics!

Free questions:

Free CISSP practice questions Elsevier (2015 version)

Free daily CISSP practice questions (Facebook group)

Wentz Wu QOTD (Blog)

Adam Gordon QOTD (LinkedIn)

IT Dojo (YouTube)

Study Guides:

Study guide (free) – The memory palace – Prashant Mohan v5.0 – 2024 Exam Ready

Study guide (free) – Sunflower notes – Maarten de Frankrijker v2.0

Study guide (free) – CISSP Process guide – Fadi Sodah (madunix) v21.0

Study guide – CISSP notes – Luc Desfosses

Other:

CISSP Glossary – Student Guide

ISACA Cybersecurity Fundamentals Glossary

NIST – RMF for Systems and Organizations Introductory Course

Flash cards – Brainscrape

Awesome Security – Github

All relevant NIST documents

NIST 800-30 – Guide for Conducting Risk Assessments
https://csrc.nist.gov/publications/detail/sp/800-30/rev-1/final

NIST 800-12 – An Introduction to Information Security
https://csrc.nist.gov/publications/detail/sp/800-12/rev-1/final

NIST 800-34 – Contingency Planning Guide for Information Technology Systems https://csrc.nist.gov/publications/detail/sp/800-34/rev-1/final

NIST 800-37 – Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy
https://csrc.nist.gov/publications/detail/sp/800-37/rev-2/final

NIST 800-39 – Managing Information Security Risk: Organization, Mission, and Information System View
https://csrc.nist.gov/publications/detail/sp/800-39/final

NIST 800-53 – Security and Privacy Controls for Federal Information Systems and Organization
https://csrc.nist.gov/publications/detail/sp/800-53/rev-4/final
https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/draft

NIST 800-86 – Guide to Integrating Forensic Techniques into Incident Response https://csrc.nist.gov/publications/detail/sp/800-86/final

NIST 800-88 – Guidelines for Media Sanitization
https://csrc.nist.gov/publications/detail/sp/800-88/rev-1/final

NIST 800-115 – Technical Guide to Information Security Testing and Assessment
https://csrc.nist.gov/publications/detail/sp/800-115/final

NIST 800-128 – Guide for Security-Focused Configuration Management of Information Systems https://csrc.nist.gov/publications/detail/sp/800-128/final

NIST 800-137 – Information Security Continuous Monitoring
https://csrc.nist.gov/publications/detail/sp/800-137/final

NIST 800-145 – The NIST Definition of Cloud Computing
https://csrc.nist.gov/publications/detail/sp/800-145/final

NIST 800-46 – Guide to Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Security
https://csrc.nist.gov/publications/detail/sp/800-46/rev-2/final

NIST 800-61 Computer Security Incident Handling Guide
https://csrc.nist.gov/publications/detail/sp/800-61/rev-2/final

NIST 800-160 Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems
https://csrc.nist.gov/publications/detail/sp/800-160/vol-1/final

Study groups and forums

Facebook – CISSP, CISM, CC, and PMP certification training and mentoring by Thor Teaches!

Facebook – Effective CISSP by Wentz Wu

Facebook – CISSP Exam Preparation – Study Notes and Theory!

Discord study group CISSP, CISM, CC, PMP – by Thor Teaches.

Discord study group C ertification Station.

Reddit – CISSP subreddit!

Infosecinstitute forum!

CISSP Free CPE’s: ISC2 explaining how the CPE’s work

ISC2 – 500+ CPE’s available (Webinar).

SANS – 500+ CPE’s available (Webinar).

ISACA – 100+ CPE’s available (Webinar).

Brighttalk – 100s of webcasts for ISC2 CPEs

Infosecurity-magazine + 350+ CPE’s available (Webinar).

wh1t3rabbit – 250+ CPE’s available (Podcast).

OWASP 100+ CPE’s available (Podcast).

Certs.org – 200+ CPE’s available (Podcast).

Edx.org – 250+ CPE’s available (Online training).

Coursera – 250+ CPE’s available (Online training).

Securitytube – 10,000+ CPE’s available (Videos).

Youtube – 100,000+ CPE’s available (Videos).

CISSP Links:

If a link is broken please let me know so I can fix it!

ISC2 and the CISSP certification links:

Waterfall Model	https://en.wikipedia.org/wiki/Waterfall_model
The ThorTeaches Discord	https://discord.thorteaches.com/
Cybersecurity Job Openings Article	https://www.forbes.com/sites/stevemorgan/2016/01/02/one-million-cybersecurity-job-openings-in-2016/
Cybersecurity Jobs	https://cybersecurityventures.com/jobs/
CyberSeek Heatmap	https://www.cyberseek.org/heatmap.html
The ThorTeaches Facebook Group	https://www.facebook.com/groups/ThorTeaches
The ThorTeaches Website	https://thorteaches.com/
Brief History of the Internet	https://www.internetsociety.org/internet/history-internet/brief-history-internet-related-networks
Cybersecurity Job Market	https://www.forbes.com/sites/stevemorgan/2016/01/02/one-million-cybersecurity-job-openings-in-2016/2/
ISC2	https://en.wikipedia.org/wiki/ISC2
ISC2 Community	https://community.isc2.org/
ISC2 Exam Candidates	https://www.isc2.org/candidate
ISC2 Qualification Pathfinder	https://www.isc2.org/Certifications/Qualification-Pathfinder
Registering for ISC2 Exam	https://www.isc2.org/Register-for-Exam
Associate of ISC2 Program	https://www.isc2.org/Certifications/Associate
CISSP	https://en.wikipedia.org/wiki/Certified_Information_Systems_Security_Professional
CISSP Certification Information	https://www.isc2.org/Certifications/CISSP
CISSP Certification Steps	https://www.isc2.org/Certifications/CISSP#Certification%20&%20Membership
CISSP Exam Outline	https://www.isc2.org/certifications/cissp/cissp-certification-exam-outline
Register for your ISC2 exam	https://my.isc2.org/s/ISC2-Pearson

CISSP certification 2021 Domain (Common body of knowledge) domains:

Domain 1: Security and Risk Management

Description	Link
Computer Fraud and Abuse Act of 1986 (CFAA)	https://en.wikipedia.org/wiki/Computer_Fraud_and_Abuse_Act
CIA Triad	https://en.wikipedia.org/wiki/Information_security#Key_concepts
COBIT	http:https:https://www.isaca.org/Knowledge-Center/COBIT/Pages/Overview.aspx
Computer Ethics Principles	https://en.wikipedia.org/wiki/Computer_Ethics_Institute
Copyright	https://en.wikipedia.org/wiki/Copyright
Copyright Fair Use Index	https://www.copyright.gov/fair-use/
Corporate IT governance	https://en.wikipedia.org/wiki/IT_governance
Due Diligence	https://en.wikipedia.org/wiki/Due_diligence
Electronic Communications Privacy Act of 1986 (ECPA)	https://en.wikipedia.org/wiki/Electronic_Communications_Privacy_Act
EU Artificial Intelligence Act (AI Act)	https://en.wikipedia.org/wiki/Artificial_Intelligence_Act
European Union Agency for Cybersecurity (ENISA)	https://www.enisa.europa.eu/
Framework for Improving Critical Infrastructure Cybersecurity	https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.04162018.pdf
Gap Analysis	https://en.wikipedia.org/wiki/Gap_analysis
General Data Protection Regulation (GDPR)	https://en.wikipedia.org/wiki/General_Data_Protection_Regulation
Gramm-Leach-Bliley Act	https://en.wikipedia.org/wiki/Gramm–Leach–Bliley_Act
Governance, risk management, and compliance (GRC)	https://en.wikipedia.org/wiki/Governance,_risk_management,_and_compliance
HIPAA	https://en.wikipedia.org/wiki/Health_Insurance_Portability_and_Accountability_Act
Information privacy	https://en.wikipedia.org/wiki/Information_privacy
Information privacy law	https://en.wikipedia.org/wiki/Information_privacy_law
Information security	https://en.wikipedia.org/wiki/Information_security
Information Security Governance	https://en.wikipedia.org/wiki/Information_security_governance
Information Security Management	https://en.wikipedia.org/wiki/Information_security_management
Information security policies	https://en.wikipedia.org/wiki/Information_security_policy
Intellectual property	https://en.wikipedia.org/wiki/Intellectual_property
ISO	https://en.wikipedia.org/wiki/International_Organization_for_Standardization
ISO/IEC 27000-Series	https://en.wikipedia.org/wiki/ISO/IEC_27000-series
IT law	https://en.wikipedia.org/wiki/Information_technology_law
NIST SP 800-30 Framework	https://en.wikipedia.org/wiki/IT_risk_management#NIST_SP_800_30_framework
Non-Disclosure Agreement	https://en.wikipedia.org/wiki/Non-disclosure_agreement
OECD Privacy Framework	https://www.oecd.org/sti/ieconomy/oecd_privacy_framework.pdf
Organizational Processes	https://en.wikipedia.org/wiki/Organizational_structure
Patent	https://en.wikipedia.org/wiki/Patent
Patriot Act	https://en.wikipedia.org/wiki/Patriot_Act
PCI-DSS	https://en.wikipedia.org/wiki/Payment_Card_Industry_Data_Security_Standard
Sarbanes-Oxley Act	https://en.wikipedia.org/wiki/Sarbanes–Oxley_Act
Security Breach Notification Laws	https://www.ncsl.org/research/telecommunications-and-information-technology/security-breach-notification-laws.aspx
Trademark	https://en.wikipedia.org/wiki/Trademark
PCI Security Standards Council	https://www.pcisecuritystandards.org/pci_security/
ISO 22301 Standard	https://en.wikipedia.org/wiki/ISO_22301
COBIT ISACA resources	https://www.isaca.org/resources/cobit
Committee of Sponsoring Organizations (COSO)	https://en.wikipedia.org/wiki/Committee_of_Sponsoring_Organizations_of_the_Treadway_Commission
End-User License Agreement (EULA)	https://en.wikipedia.org/wiki/End-user_license_agreement
FedRAMP	https://en.wikipedia.org/wiki/Federal_Risk_and_Authorization_Management_Program
NIST	https://en.wikipedia.org/wiki/National_Institute_of_Standards_and_Technology
NIST SP 800-12 Rev. 1	https://csrc.nist.gov/publications/detail/sp/800-12/rev-1/final
NIST SP 800-37 Rev. 1	https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-37r1.pdf
NIST SP 800-37 Rev. 2	https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-37r2.pdf
NIST SP 800-53	https://en.wikipedia.org/wiki/NIST_Special_Publication_800-53
IT Risk	https://en.wikipedia.org/wiki/IT_risk
IT risk management	https://en.wikipedia.org/wiki/IT_risk_management
Risk	https://en.wikipedia.org/wiki/Risk
Risk – Attackers/Attacks	https://en.wikipedia.org/wiki/Cyberattack
Risk Assessment	https://en.wikipedia.org/wiki/Risk_management#Risk_assessment_and_analysis
Risk Management	https://en.wikipedia.org/wiki/Risk_management
Risk management tools	https://en.wikipedia.org/wiki/Risk_management_tools
Threat Modeling	https://en.wikipedia.org/wiki/Threat_model
Threat Modeling Process Article	https://www.experts-exchange.com/articles/33330/Threat-Modeling-Process-Basics-and-Purpose.html
Key Risk Indicator	https://en.wikipedia.org/wiki/Key_risk_indicator
Supply chain risk management	https://en.wikipedia.org/wiki/Supply_chain_risk_management
Separation of duties	https://en.wikipedia.org/wiki/Separation_of_duties
Security Awareness Training	https://en.wikipedia.org/wiki/Internet_Security_Awareness_Training
Software supply chain	https://en.wikipedia.org/wiki/Software_supply_chain
Business continuity	https://en.wikipedia.org/wiki/Business_continuity
Business Continuity Planning	https://en.wikipedia.org/wiki/Business_continuity_planning
ISC2 Ethics	https://www.isc2.org/Ethics
OCTAVE	http:https:https://www.cert.org/resilience/products-services/octave/index.cfm
The Business Continuity Institute	https://www.thebci.org/
Capital Expenditure	https://en.wikipedia.org/wiki/Capital_expenditure
Center for Internet Security (CIS)	https://www.cisecurity.org
ITIL Framework	https://en.wikipedia.org/wiki/ITIL
Montreal Protocol	https://en.wikipedia.org/wiki/Montreal_Protocol
Operating Expense	https://en.wikipedia.org/wiki/Operating_expense
RACI Charts	https://en.wikipedia.org/wiki/Responsibility_assignment_matrix
Rainbow Series	https://en.wikipedia.org/wiki/Rainbow_Series
SABSA	https://en.wikipedia.org/wiki/Sherwood_Applied_Business_Security_Architecture
SWOT Analysis	https://en.wikipedia.org/wiki/SWOT_analysis
Wassenaar Arrangement	https://en.wikipedia.org/wiki/Wassenaar_Arrangement

Domain 2: Asset Security


Security Clearance	https://en.wikipedia.org/wiki/Security_clearance
Data Classification	https://en.wikipedia.org/wiki/Data_classification_(business_intelligence)
Data Collection	https://en.wikipedia.org/wiki/Data_collection
Data Retention	https://en.wikipedia.org/wiki/Data_retention
Digital rights management (DRM)	https://en.wikipedia.org/wiki/Digital_rights_management
Asset management	https://en.wikipedia.org/wiki/Asset_management
Software as a Service (SaaS)	https://en.wikipedia.org/wiki/Software_as_a_service
Data at rest	https://en.wikipedia.org/wiki/Data_at_rest
Data Destruction	https://en.wikipedia.org/wiki/Data_erasure
Data in transit	https://en.wikipedia.org/wiki/Data_in_transit
Data in use	https://en.wikipedia.org/wiki/Data_in_use
Data Protection Methods	https://en.wikipedia.org/wiki/Data_protection
Data Remanence	https://en.wikipedia.org/wiki/Data_remanence
Data loss prevention (DLP) software	https://en.wikipedia.org/wiki/Data_loss_prevention_software
Information Lifecycle	https://en.wikipedia.org/wiki/Information_lifecycle_management
Modern Encryption	https://en.wikipedia.org/wiki/Cryptography#Modern_cryptography
Chain of trust	https://en.wikipedia.org/wiki/Chain_of_trust
Firmware	https://en.wikipedia.org/wiki/Firmware
Flash Memory	https://en.wikipedia.org/wiki/Flash_memory
Memory Protection	https://en.wikipedia.org/wiki/Memory_protection
Verification and Validation	https://en.wikipedia.org/wiki/Verification_and_validation
Data Definition Language (DDL)	https://en.wikipedia.org/wiki/Data_definition_language
Data Manipulation Language (DML)	https://en.wikipedia.org/wiki/Data_manipulation_language
Random-Access Memory (RAM)	https://en.wikipedia.org/wiki/Random-access_memory
Read-Only Memory (ROM)	https://en.wikipedia.org/wiki/Read-only_memory

Domain 3: Security Architecture and Engineering


Privacy by Design	https://en.wikipedia.org/wiki/Privacy_by_design
Cloud Security Alliance (CSA)	https://cloudsecurityalliance.org
Requirements Analysis	https://en.wikipedia.org/wiki/Requirements_analysis
Computer Security	https://en.wikipedia.org/wiki/Computer_security
Security Models	https://en.wikipedia.org/wiki/Computer_security_model
Bell-LaPadula Model	https://en.wikipedia.org/wiki/Bell-LaPadula_model
Biba Model	https://en.wikipedia.org/wiki/Biba_Model
Clark–Wilson model	https://en.wikipedia.org/wiki/Clark–Wilson_model
Graham-Denning Model	https://en.wikipedia.org/wiki/Graham-Denning_model
Physical security	https://en.wikipedia.org/wiki/Physical_security
Cloud Sccess Security Broker (CASB)	https://en.wikipedia.org/wiki/Cloud_access_security_broker
Cloud computing	https://en.wikipedia.org/wiki/Cloud_computing
Cloud computing security	https://en.wikipedia.org/wiki/Cloud_computing_security
Cloud Security Article	https://www.experts-exchange.com/articles/32132/Better-Security-in-the-Cloud.html
Cloud Security Threats Article	https://www.experts-exchange.com/articles/31744/Cloud-Security-Threats-Risks-and-Concerns.html
Containerization	https://en.wikipedia.org/wiki/OS-level_virtualization
Defense in Depth	https://en.wikipedia.org/wiki/Defense_in_depth_(computing)
Distributed Systems	https://en.wikipedia.org/wiki/Distributed_computing
Edge Computing	https://en.wikipedia.org/wiki/Edge_computing
Embedded Systems	https://en.wikipedia.org/wiki/Embedded_system
Hypervisor	https://en.wikipedia.org/wiki/Hypervisor
Industrial Control Systems	https://en.wikipedia.org/wiki/Industrial_control_system
Infrastructure as a Service (IaaS)	https://en.wikipedia.org/wiki/Infrastructure_as_a_service
Internet of things (IoT)	https://en.wikipedia.org/wiki/Internet_of_things
IoT Security Guidelines	https://www.experts-exchange.com/articles/33356/Internet-of-Things-Guidelines-to-prevent-common-IoT-security-risks.html
Platform as a Service (PaaS)	https://en.wikipedia.org/wiki/Platform_as_a_service
Serverless Computing	https://en.wikipedia.org/wiki/Serverless_computing
Virtual Private Cloud	https://en.wikipedia.org/wiki/Virtual_private_cloud
Virtualized Systems	https://en.wikipedia.org/wiki/Virtualization
Asymmetric Encryption	https://en.wikipedia.org/wiki/Public-key_cryptography
Cryptographic Nonce	https://en.wikipedia.org/wiki/Cryptographic_nonce
Cryptography	https://en.wikipedia.org/wiki/Cryptography
Digital Signatures	https://en.wikipedia.org/wiki/Digital_signature
Encryption	https://en.wikipedia.org/wiki/Encryption
Hashing	https://en.wikipedia.org/wiki/Hash_function
Hybrid Cryptosystem	https://en.wikipedia.org/wiki/Hybrid_cryptosystem
Initialization Vector	https://en.wikipedia.org/wiki/Initialization_vector
IPSec	https://en.wikipedia.org/wiki/Ipsec
Key Management	https://en.wikipedia.org/wiki/Key_management
One-Time Pad	https://en.wikipedia.org/wiki/One-time_pad
Pretty Good Privacy (PGP)	https://en.wikipedia.org/wiki/Pretty_Good_Privacy
Public Key Infrastructure	https://en.wikipedia.org/wiki/Public_key_infrastructure
Secure Defaults	https://en.wikipedia.org/wiki/Secure_by_default
Secure Design Principles	https://en.wikipedia.org/wiki/Secure_by_design
Security by Design Principles	https://wiki.owasp.org/index.php/Security_by_Design_Principles
Symmetric Encryption	https://en.wikipedia.org/wiki/Symmetric-key_algorithm
Architectural Design	https://en.wikipedia.org/wiki/Software_architecture
Common Criteria	https://en.wikipedia.org/wiki/Common_Criteria
Covert Channels	https://en.wikipedia.org/wiki/Covert_channel
Emerging Technologies	https://en.wikipedia.org/wiki/Emerging_technologies
Fault Injection	https://en.wikipedia.org/wiki/Fault_injection
Hardware Architecture	https://en.wikipedia.org/wiki/Computer_architecture
Harrison-Ruzzo-Ullman (HRU) Model	https://en.wikipedia.org/wiki/HRU_(security)
Microservices	https://en.wikipedia.org/wiki/Microservices
Multilevel security	https://en.wikipedia.org/wiki/Multilevel_security
Operating System Kernel	https://en.wikipedia.org/wiki/Kernel_(operating_system)
Server (computing)	https://en.wikipedia.org/wiki/Server_(computing)
System integration	https://en.wikipedia.org/wiki/Systems_integration
Trusted Computer System Evaluation Criteria (TCSEC)	https://en.wikipedia.org/wiki/Trusted_Computer_System_Evaluation_Criteria
Trusted Platform Module	https://en.wikipedia.org/wiki/Trusted_Platform_Module
Cybercrimes/Data Breaches	https://en.wikipedia.org/wiki/Cybercrime
Warfare/Terrorism/Ransomware	https://en.wikipedia.org/wiki/Cyberterrorism
Fire Suppression	https://en.wikipedia.org/wiki/Fire_suppression_system
Attacks on Cryptography	https://en.wikipedia.org/wiki/Cryptanalysis
Brute Force Attack	https://en.wikipedia.org/wiki/Brute-force_attack
MITM Attack	https://en.wikipedia.org/wiki/Man-in-the-middle_attack
History of Cryptography	https://en.wikipedia.org/wiki/History_of_cryptography
Fire Classes	https://en.wikipedia.org/wiki/Fire_class
KISS principle	https://en.wikipedia.org/wiki/KISS_principle
Object Database	https://en.wikipedia.org/wiki/Object_database
Object Request Broker (ORB)	https://en.wikipedia.org/wiki/Object_request_broker
SIGABA	https://en.wikipedia.org/wiki/SIGABA
Stuxnet	https://en.wikipedia.org/wiki/Stuxnet
Take-Grant Protection Model	https://en.wikipedia.org/wiki/Take-grant_protection_model
Web-oriented architecture	https://en.wikipedia.org/wiki/Web-oriented_architecture
Zachman Framework	https://en.wikipedia.org/wiki/Zachman_Framework

Domain 4: Communication and Network Security


Address Resolution Protocol (ARP)	https://en.wikipedia.org/wiki/Address_Resolution_Protocol
Bluetooth	https://en.wikipedia.org/wiki/Bluetooth
Cellular Network	https://en.wikipedia.org/wiki/Cellular_network
Cellular/Mobile Networks	https://en.wikipedia.org/wiki/Mobile_telephony
Challenge-Handshake Authentication Protocol (CHAP)	https://en.wikipedia.org/wiki/Challenge-Handshake_Authentication_Protocol
Cisco Internetworking Basics	http:https:https://www.ciscopress.com/articles/article.asp?p=31289
Classless Inter-Domain Routing (CIDR)	https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing
Computer Networking	https://en.wikipedia.org/wiki/Computer_network
Content Distribution Networks (CDN)	https://en.wikipedia.org/wiki/Content_delivery_network
Converged Protocols	https://en.wikipedia.org/wiki/Converged_network
Data Communications	https://en.wikipedia.org/wiki/Data_transmission
Distance-Vector Routing Protocol	https://en.wikipedia.org/wiki/Distance-vector_routing_protocol
Domain Name System (DNS)	https://en.wikipedia.org/wiki/Domain_Name_System
Dynamic Host Configuration Protocol (DHCP)	https://en.wikipedia.org/wiki/Dynamic_Host_Configuration_Protocol
Ethernet	https://en.wikipedia.org/wiki/Ethernet
Fiber-Optic	https://en.wikipedia.org/wiki/Fiber-optic_communication
File Transfer Protocol (FTP)	https://en.wikipedia.org/wiki/File_Transfer_Protocol
Firewalls	https://en.wikipedia.org/wiki/Firewall_(computing)
Frame Relay	https://en.wikipedia.org/wiki/Frame_Relay
Global Area Network (GAN)	https://en.wikipedia.org/wiki/Global_area_network
Internet Assigned Numbers Authority (IANA)	https://en.wikipedia.org/wiki/Internet_Assigned_Numbers_Authority
Internet Control Message Protocol (ICMP)	https://en.wikipedia.org/wiki/Internet_Control_Message_Protocol
IP Addresses	https://en.wikipedia.org/wiki/IP_address
IPv4	https://en.wikipedia.org/wiki/IPv4
IPv6	https://en.wikipedia.org/wiki/IPv6
Layer 1-3 Devices	https://en.wikipedia.org/wiki/Networking_hardware
MAC Address	https://en.wikipedia.org/wiki/MAC_address
Micro-Segmentation	https://en.wikipedia.org/wiki/Microsegmentation
Modems	https://en.wikipedia.org/wiki/Modem
Multiprotocol Label Switching (MPLS)	https://en.wikipedia.org/wiki/Multiprotocol_Label_Switching
Network Access Control	https://en.wikipedia.org/wiki/Network_access_control
Network Management	https://en.wikipedia.org/wiki/Network_management
Network Switch	https://en.wikipedia.org/wiki/Network_switch
Network topology	https://en.wikipedia.org/wiki/Network_topology
OSI Model	https://en.wikipedia.org/wiki/OSI_model
Ping Networking Utility	https://en.wikipedia.org/wiki/Ping_(networking_utility)
Quality of Service (QoS)	https://en.wikipedia.org/wiki/Quality_of_service
Remote access service	https://en.wikipedia.org/wiki/Remote_access_service
Remote Desktop Protocol (RDP)	https://en.wikipedia.org/wiki/Remote_Desktop_Protocol
Remote desktop software	https://en.wikipedia.org/wiki/Remote_desktop_software
Router	https://en.wikipedia.org/wiki/Router_(computing)
Routing Protocols	https://en.wikipedia.org/wiki/Routing_protocol
Satellite Internet Access	https://en.wikipedia.org/wiki/Satellite_Internet_access
Secure Access Service Edge	https://en.wikipedia.org/wiki/Secure_access_service_edge
Secure Communication Channels	https://en.wikipedia.org/wiki/Secure_communication
Secure Shell (SSH)	https://en.wikipedia.org/wiki/Secure_Shell
Simple Network Management Protocol (SNMP)	https://en.wikipedia.org/wiki/Simple_Network_Management_Protocol
Software Defined Networks	https://en.wikipedia.org/wiki/Software-defined_networking
TCP and UDP Port Numbers	https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers
TCP/IP Model	https://en.wikipedia.org/wiki/Internet_protocol_suite
Transmission Control Protocol (TCP)	https://en.wikipedia.org/wiki/Transmission_Control_Protocol
Transmission Media	https://en.wikipedia.org/wiki/Transmission_medium
Twisted Pair	https://en.wikipedia.org/wiki/Twisted_pair
User Datagram Protocol (UDP)	https://en.wikipedia.org/wiki/User_Datagram_Protocol
Virtual Private Network (VPN)	https://en.wikipedia.org/wiki/Virtual_private_network
VLAN	https://en.wikipedia.org/wiki/Virtual_LAN
Voice over IP (VoIP)	https://en.wikipedia.org/wiki/Voice_over_IP
WAN Protocols	https://en.wikipedia.org/wiki/Wide_area_network
WiFi	https://en.wikipedia.org/wiki/Wi-Fi
Wireless Access Point	https://en.wikipedia.org/wiki/Wireless_access_point
Wireless LAN	https://en.wikipedia.org/wiki/Wireless_LAN
Wireless Networks	https://en.wikipedia.org/wiki/Wireless_network
Zero Trust	https://en.wikipedia.org/wiki/Zero_trust_security_model
ZigBee	https://en.wikipedia.org/wiki/ZigBee
Transport Layer Security (TLS)	https://en.wikipedia.org/wiki/Transport_Layer_Security
Denial-of-Service Attack	https://en.wikipedia.org/wiki/Denial-of-service_attack
Eavesdropping	https://en.wikipedia.org/wiki/Eavesdropping
Intrusion detection system	https://en.wikipedia.org/wiki/Intrusion_detection_system
Carrier-Sense Multiple Access (CSMA)	https://en.wikipedia.org/wiki/Carrier-sense_multiple_access
Coaxial Cable	https://en.wikipedia.org/wiki/Coaxial_cable
Duplex	https://en.wikipedia.org/wiki/Duplex_(telecommunications)
Diameter Protocol	https://en.wikipedia.org/wiki/Diameter_(protocol)
Internet Architecture Board	https://en.wikipedia.org/wiki/Internet_Architecture_Board
Storage area network (SAN)	https://en.wikipedia.org/wiki/Storage_area_network

Domain 5: Identity and Access Management (IAM)


Need to know	https://en.wikipedia.org/wiki/Need_to_know
IAAA Framework	https://en.wikipedia.org/wiki/AAA_(computer_security)
Attribute-based access control (ABAC)	https://en.wikipedia.org/wiki/Attribute-based_access_control
Access Control	https://en.wikipedia.org/wiki/Access_control
Access control link 2	https://en.wikipedia.org/wiki/Information_security#Access_control
Access Control Matrix	https://en.wikipedia.org/wiki/Access_Control_Matrix
Access management	https://en.wikipedia.org/wiki/Access_management
Active Directory	https://en.wikipedia.org/wiki/Active_Directory
Authentication	https://en.wikipedia.org/wiki/Authentication
Authorization	https://en.wikipedia.org/wiki/Authorization
Credential Management Systems	https://en.wikipedia.org/wiki/Credential_Management
Discretionary access control (DAC)	https://en.wikipedia.org/wiki/Discretionary_access_control
Federated Identity Management FIDM	https://en.wikipedia.org/wiki/Federated_identity
Identity management	https://en.wikipedia.org/wiki/Identity_management
Identity Provisioning	https://en.wikipedia.org/wiki/Provisioning_(technology)
Identity verification service	https://en.wikipedia.org/wiki/Identity_verification_service
Least Privilege	https://en.wikipedia.org/wiki/Principle_of_least_privilege
Mandatory access control (MAC)	https://en.wikipedia.org/wiki/Mandatory_access_control
Mobile Device Management	https://en.wikipedia.org/wiki/Mobile_device_management
Mobile Device Security	https://en.wikipedia.org/wiki/Mobile_security
Multi-factor authentication	https://en.wikipedia.org/wiki/Multi-factor_authentication
Mutual Authentication	https://en.wikipedia.org/wiki/Mutual_authentication
Network Authentication	https://en.wikipedia.org/wiki/Authentication_protocol
Password Authentication Protocol (PAP)	https://en.wikipedia.org/wiki/Password_Authentication_Protocol
Privilege Escalation	https://en.wikipedia.org/wiki/Privilege_escalation
Role-based access control (RBAC)	https://en.wikipedia.org/wiki/Role-based_access_control
Service Accounts Management	https://en.wikipedia.org/wiki/Service_account
Single Sign-On	https://en.wikipedia.org/wiki/Single_sign-on
System Access	https://en.wikipedia.org/wiki/Access_control#Computer_security
Type 1 Authentication	https://en.wikipedia.org/wiki/Password
Type 3 Authentication	https://en.wikipedia.org/wiki/Biometrics
Challenge-Response Authentication	https://en.wikipedia.org/wiki/Challenge–response_authentication
Extensible Authentication Protocol (EAP)	https://en.wikipedia.org/wiki/Extensible_Authentication_Protocol
Kerberos	https://en.wikipedia.org/wiki/Kerberos_(protocol)
RADIUS	https://en.wikipedia.org/wiki/RADIUS
Salting	https://en.wikipedia.org/wiki/Salt_(cryptography)
Session Management	https://en.wikipedia.org/wiki/Session_(computer_science)
TACACS	https://en.wikipedia.org/wiki/TACACS
Security Account Manager	https://en.wikipedia.org/wiki/Security_Account_Manager

Domain 6: Security Assessment and Testing


IT Security Audit	https://en.wikipedia.org/wiki/Information_security_audit
Auditing and Logging	https://en.wikipedia.org/wiki/Audit_trail
Information security audit	https://en.wikipedia.org/wiki/Information_technology_security_audit
IT Audits	https://na.theiia.org/standards-guidance/recommended-guidance/practice-guides/Pages/GTAG9.aspx – DEAD
NIST SP 800-115	https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-115.pdf
Security Audits	https://en.wikipedia.org/wiki/Information_technology_audit
NIST SP 800-37	https://en.wikipedia.org/wiki/NIST_Special_Publication_800-37
Vulnerability (computing)	https://en.wikipedia.org/wiki/Vulnerability_(computing)
Vulnerability Assessment	https://en.wikipedia.org/wiki/Vulnerability_assessment
Security Assessments	https://en.wikipedia.org/wiki/IT_security_assessment
Vulnerability Assessments vs. Penetration Tests	https://www.experts-exchange.com/articles/31793/Vulnerability-Assessments-versus-Penetration-Tests.html
Security Controls Testing	https://en.wikipedia.org/wiki/Security_testing
Vulnerability Mitigation	https://en.wikipedia.org/wiki/Vulnerability_management
Core Security Penetration Testing Services	http:https:https://www.coresecurity.com/
Code Review and Testing	https://en.wikipedia.org/wiki/Code_review
Continuous Monitoring	https://en.wikipedia.org/wiki/Continuous_monitoring
Kali Linux	https://www.kali.org/
Coverage Analysis	https://en.wikipedia.org/wiki/Code_coverage
Dynamic Testing	https://en.wikipedia.org/wiki/Dynamic_testing
Social Engineering	https://en.wikipedia.org/wiki/Social_engineering_(security)
0-day Attacks	https://en.wikipedia.org/wiki/Zero-day_(computing)
Pen Testing Tools	https://en.wikipedia.org/wiki/Penetration_test#Tools
Penetration Testing	https://en.wikipedia.org/wiki/Penetration_test
Security Fuzzers	https://en.wikipedia.org/wiki/Fuzzing
Vulnerability Scanners	https://en.wikipedia.org/wiki/Vulnerability_scanner
Metasploit	https://metasploit.com/
Nessus Software	https://en.wikipedia.org/wiki/Nessus_(software)
Password Cracking	https://en.wikipedia.org/wiki/Password_cracking
Rainbow Table	https://en.wikipedia.org/wiki/Rainbow_table
Exception Handling	https://en.wikipedia.org/wiki/Exception_handling
Misuse Case Testing	https://en.wikipedia.org/wiki/Misuse_case
SOC 1/2/3 reports	https://en.wikipedia.org/wiki/System_and_Organization_Controls
SOC 2 Report	https://www.aicpa-cima.com/topic/audit-assurance/audit-and-assurance-greater-than-soc-2

Domain 7: Security Operations


Internal control	https://en.wikipedia.org/wiki/Internal_control
ISO/IEC 27031 Guidelines	http:https:https://www.iso27001security.com/html/27031.html
NIST SP 800-34 Rev. 1	https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-34r1.pdf
NIST SP 800-92	https://en.wikipedia.org/wiki/NIST_Special_Publication_800-92
Change Management	https://en.wikipedia.org/wiki/Change_management
NIST Publications	https://www.nist.gov/publications
NIST SP 800-128	https://csrc.nist.gov/publications/detail/sp/800-128/final
Fire Sprinkler System	https://en.wikipedia.org/wiki/Fire_sprinkler_system
Physical Information Security	https://en.wikipedia.org/wiki/Physical_information_security
AI in Security	https://en.wikipedia.org/wiki/Artificial_intelligence_for_cybersecurity
Antivirus software	https://en.wikipedia.org/wiki/Antivirus_software
Application Positive-listing	https://en.wikipedia.org/wiki/Whitelist
Configuration Management	https://en.wikipedia.org/wiki/Configuration_management
Endpoint Security	https://en.wikipedia.org/wiki/Endpoint_security
Keystroke Logging	https://en.wikipedia.org/wiki/Keystroke_logging
Logging and Monitoring	https://en.wikipedia.org/wiki/Log_management
Patch Management	https://en.wikipedia.org/wiki/Patch_(computing)
Sandboxing	https://en.wikipedia.org/wiki/Sandbox_(computer_security)
Security Tools	http:https:https://sectools.org/
SIEM Article	https://www.experts-exchange.com/articles/32316/What-Gives-SIEM-a-Good-Name.html
Software deployment	https://en.wikipedia.org/wiki/Software_deployment
Artificial Intelligence (AI)	https://en.wikipedia.org/wiki/Artificial_intelligence
Managed security service	https://en.wikipedia.org/wiki/Managed_security_service
Managed Services	https://en.wikipedia.org/wiki/Managed_services
Backup Site	https://en.wikipedia.org/wiki/Backup_site
Backups	https://en.wikipedia.org/wiki/Backup
Computer Security Incident Management	https://en.wikipedia.org/wiki/Computer_security_incident_management
Crisis Management	https://en.wikipedia.org/wiki/Crisis_management
Disaster Recovery	https://en.wikipedia.org/wiki/Disaster_recovery
Disaster Recovery Plan	https://en.wikipedia.org/wiki/Disaster_recovery_plan
Disaster Recovery Solution Design	https://www.experts-exchange.com/articles/33009/Disaster-Recovery-Solution-Design.html
Emergency Management	https://en.wikipedia.org/wiki/Emergency_management
Emergency Operations Center	https://en.wikipedia.org/wiki/Emergency_operations_center
FEMA COOP Planning Template	https://www.fema.gov/sites/default/files/2020-10/fema_planning-template-federal-departments-agencies_october-2020_0.pdf
Incident Management	https://en.wikipedia.org/wiki/Incident_management
Post-Disaster Recovery Planning Forum Notes	https://nws.weather.gov/nthmp/Minutes/oct-nov07/post-disaster_recovery_planning_forum_uo-csc-2.pdf
Recovery Time Objective (RTO)	https://en.wikipedia.org/wiki/Recovery_time_objective
Redundancy	https://en.wikipedia.org/wiki/Redundancy_(engineering)
System Resilience	https://en.wikipedia.org/wiki/High_availability#Resilience
Honeynets/Honeypots	https://en.wikipedia.org/wiki/Honeypot_(computing)
Malware	https://en.wikipedia.org/wiki/Malware
Incident Handling and Response Plan	https://www.experts-exchange.com/articles/31763/Incident-Handling-and-Response-Plan.html
Phishing	https://en.wikipedia.org/wiki/Phishing
Ransomware	https://en.wikipedia.org/wiki/Ransomware
Security information and event management (SIEM)	https://en.wikipedia.org/wiki/Security_information_and_event_management
Security orchestration, automation and response (SOAR)	https://en.wikipedia.org/wiki/Security_orchestration
Chain of custody	https://en.wikipedia.org/wiki/Chain_of_custody
Computer forensics	https://en.wikipedia.org/wiki/Computer_forensics
Digital Forensics	https://en.wikipedia.org/wiki/Digital_forensics
Digital Forensics Tools	https://en.wikipedia.org/wiki/List_of_digital_forensics_tools
Evidence Artifacts	https://en.wikipedia.org/wiki/Digital_artifact
Service-level Agreements	https://en.wikipedia.org/wiki/Service-level_agreement
Threat Intelligence	https://en.wikipedia.org/wiki/Cyber_threat_intelligence
user and entity behavior analytics (UEBA)	https://en.wikipedia.org/wiki/User_behavior_analytics
Mean Time Between Failures (MTBF)	https://en.wikipedia.org/wiki/Mean_time_between_failures
Mean Time To Repair (MTTR)	https://en.wikipedia.org/wiki/Mean_time_to_repair
Performance Indicator	https://en.wikipedia.org/wiki/Performance_indicator
Performance indicator KPI	https://en.wikipedia.org/wiki/Performance_indicator#Key_performance_indicator
RAID	https://en.wikipedia.org/wiki/RAID
Supercomputer	https://en.wikipedia.org/wiki/Supercomputer

Domain 8: Software Development Security


API Security	https://en.wikipedia.org/wiki/Application_programming_interface#Security
Application Programming Interface (API)	https://en.wikipedia.org/wiki/API
Database security	https://en.wikipedia.org/wiki/Database_security
Databases	https://en.wikipedia.org/wiki/Database
2021 OWASP Top 10	https://owasp.org/Top10/
Application Security	https://en.wikipedia.org/wiki/Application_security
Buffer Overflow	https://en.wikipedia.org/wiki/Buffer_overflow
CI/CD	https://en.wikipedia.org/wiki/CI/CD
DevOps	https://en.wikipedia.org/wiki/DevOps
Integrated Development Environment	https://en.wikipedia.org/wiki/Integrated_development_environment
Integrated Product Team	https://en.wikipedia.org/wiki/Integrated_product_team
OWASP	https://en.wikipedia.org/wiki/OWASP
OWASP Main Page	https://owasp.org/
OWASP Top 10	https://owasp.org/www-project-top-ten/2017/
OWASP Vulnerability Category	https://owasp.org/www-community/vulnerabilities/
Secure SDLC Principles and Practices	https://www.experts-exchange.com/articles/33288/Secure-SDLC-Principles-and-Practices.html
Software Configuration Management	https://en.wikipedia.org/wiki/Software_configuration_management
Software Vulnerabilities	https://en.wikipedia.org/wiki/Software_vulnerability
Source-Code Security	https://en.wikipedia.org/wiki/Source_code
Agile	https://en.wikipedia.org/wiki/Agile_software_development
All-Pairs Testing	https://en.wikipedia.org/wiki/All-pairs_testing
Continual improvement (CI) process	https://en.wikipedia.org/wiki/Continuous_improvement_process
Secure Coding Guidelines	https://en.wikipedia.org/wiki/Secure_coding
Software development	https://en.wikipedia.org/wiki/Software_development
Software Development Methodologies	https://en.wikipedia.org/wiki/Software_development_process
Software Testing	https://en.wikipedia.org/wiki/Software_testing
Systems development life cycle SDLC	https://en.wikipedia.org/wiki/Systems_development_life_cycle
Version control	https://en.wikipedia.org/wiki/Version_control
Database Management System (DBMS)	https://en.wikipedia.org/wiki/Database#Database_management_system
Berkeley Software Distribution (BSD)	https://en.wikipedia.org/wiki/Berkeley_Software_Distribution
Computer-Aided Software Engineering (CASE)	https://en.wikipedia.org/wiki/Computer-aided_software_engineering
Commercial off-the-shelf (COTS)	https://en.wikipedia.org/wiki/Commercial_off-the-shelf
Crippleware	https://en.wikipedia.org/wiki/Crippleware
Extreme Programming (XP)	https://en.wikipedia.org/wiki/Extreme_programming
Freeware	https://en.wikipedia.org/wiki/Freeware
GNU Project	https://en.wikipedia.org/wiki/GNU
Maturity Models	https://en.wikipedia.org/wiki/Capability_Maturity_Model
Object-Oriented Programming (OOP)	https://en.wikipedia.org/wiki/Object-oriented_programming
Open Source Software	https://en.wikipedia.org/wiki/Open-source_software
Open-Source Model	https://en.wikipedia.org/wiki/Open-source_model
Programming Concepts	https://en.wikipedia.org/wiki/Programming_paradigm
Programming Languages	https://en.wikipedia.org/wiki/Programming_language
Prototype-Based Programming	https://en.wikipedia.org/wiki/Prototype-based_programming
Race Condition	https://en.wikipedia.org/wiki/Race_condition
Rapid Application Development (RAD)	https://en.wikipedia.org/wiki/Rapid_application_development
Relational Database Management System (RDBMS)	https://en.wikipedia.org/wiki/Relational_database_management_system
Runtime	https://en.wikipedia.org/wiki/Runtime_system
Scrum	https://en.wikipedia.org/wiki/Scrum_(software_development)
Shareware	https://en.wikipedia.org/wiki/Shareware
Software Libraries	https://en.wikipedia.org/wiki/Library_(computing)
Spiral Model	https://en.wikipedia.org/wiki/Spiral_model
Traceability Matrix	https://en.wikipedia.org/wiki/Traceability_matrix
Waterfall Model	https://en.wikipedia.org/wiki/Waterfall_model

Get the FULL CISM bundle - All videos and practice questions!

💻 32+ hours of CISM videos
📝 150 CISM questions
🤖 ThorBot: Your 24/7 AI study assistant, clarify concepts, tailor your learning, and enhance your CISM preparation.
📖 CISM study guides from the lectures (200 pages)
📖 A 2,500 word Glossary
📖 2,500 Flashcards
📖 A CISM study plan
📖 CISM Mnemonics
📄 Subtitles in English, Spanish (Latin America), French, Arabic, Chinese, and Hindi
🔗 300+ CISM links
📅 2022 curriculum updated, 2023, and 2024 updated.
📆 Lifetime or 12-months unlimited access
🏅 Certificate of completion with 32 CPEs/CEUs.

Get the FULL CISM bundle - All videos and practice questions!

Get our FREE CISSP/CISM Mnemonics!

Try our FREE 2,500 term IT and Cybersecurity glossary

Free CISM Resources:

CISSP, CISM, CC, and PMP study group and free daily practice questions (Facebook group)

Study guide – The memory palace – Prashant Mohan

Study guide – Sunflower notes – Maarten de Frankrijker

Study guide – CISSP Process guide – Fadi Sodah (madunix)

ISACA Cybersecurity Fundementals Glossary

Awesome Security – Github

GDPR – Advisera

Thorteaches study plan with daily task breakdown.

Facebook groups and forums:

Facebook – CISSP, CISM, CC, and CISA certification training and mentoring by Thor Teaches!

Discord study group CISSP, CISM, CC, PMP – by Thor Teaches.

Facebook – CISM study group

Reddit – CISSP/CISM subreddit!

Infosecinstitute forum!

CISM CPEs:

ISACA CPE reporting FAQs CISM How to report and earn CPEs
(ISC)² – 500+ CPE’s available (Webinar).
SANS – 500+ CPE’s available (Webinar).
ISACA – 100+ CPE’s available (Webinar).
Infosecurity-magazine + 350+ CPE’s available (Webinar).
wh1t3rabbit – 250+ CPE’s available (Podcast).
OWASP 100+ CPE’s available (Podcast).
Certs.org – 200+ CPE’s available (Podcast).
Edx.org – 250+ CPE’s available (Online training).
Coursera – 250+ CPE’s available (Online training).
Securitytube – 10,000+ CPE’s available (Videos).
Youtube – 100,000+ CPE’s available (Videos).

General CISM and ISACA links:

If a link is broken please let me know so I can fix it!

Description	Link
The ThorTeaches Discord	https://discord.thorteaches.com/
Cybersecurity Job Openings Article	https://www.forbes.com/sites/stevemorgan/2016/01/02/one-million-cybersecurity-job-openings-in-2016/
Cybersecurity Jobs	https://cybersecurityventures.com/jobs/
CyberSeek Heatmap	https://www.cyberseek.org/heatmap.html
The ThorTeaches Facebook Group	https://www.facebook.com/groups/ThorTeaches
The ThorTeaches Website	https://thorteaches.com/
CISM Certification Information	https://www.isaca.org/credentialing/cism
CISM Exam Content Outline	https://www.isaca.org/credentialing/cism/cism-exam-content-outline
CISM Job Practice Areas	https://www.isaca.org/credentialing/cism/cism-job-practice-areas
How to get CISM Certified	https://www.isaca.org/credentialing/cism/get-cism-certified
How to maintain you CISM Certification	https://www.isaca.org/credentialing/cism/maintain-cism-certification
ISACA Code of Professional Ethics	https://www.isaca.org/credentialing/code-of-professional-ethics
PSI Test Center YouTube Video	https://www.youtube.com/watch?v=B-X__iJmFHE

CISM Domain 1 links:

Description	Link
Computer Fraud and Abuse Act of 1986 (CFAA)	https://en.wikipedia.org/wiki/Computer_Fraud_and_Abuse_Act
CIA Triad	https://en.wikipedia.org/wiki/Information_security#Key_concepts
COBIT	http:https:https://www.isaca.org/Knowledge-Center/COBIT/Pages/Overview.aspx
Computer Ethics Principles	https://en.wikipedia.org/wiki/Computer_Ethics_Institute
Copyright	https://en.wikipedia.org/wiki/Copyright
Copyright Fair Use Index	https://www.copyright.gov/fair-use/
Corporate IT governance	https://en.wikipedia.org/wiki/IT_governance
Due Diligence	https://en.wikipedia.org/wiki/Due_diligence
Electronic Communications Privacy Act of 1986 (ECPA)	https://en.wikipedia.org/wiki/Electronic_Communications_Privacy_Act
EU Artificial Intelligence Act (AI Act)	https://en.wikipedia.org/wiki/Artificial_Intelligence_Act
European Union Agency for Cybersecurity (ENISA)	https://www.enisa.europa.eu/
Framework for Improving Critical Infrastructure Cybersecurity	https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.04162018.pdf
Gap Analysis	https://en.wikipedia.org/wiki/Gap_analysis
General Data Protection Regulation (GDPR)	https://en.wikipedia.org/wiki/General_Data_Protection_Regulation
Gramm-Leach-Bliley Act	https://en.wikipedia.org/wiki/Gramm–Leach–Bliley_Act
Governance, risk management, and compliance (GRC)	https://en.wikipedia.org/wiki/Governance,_risk_management,_and_compliance
HIPAA	https://en.wikipedia.org/wiki/Health_Insurance_Portability_and_Accountability_Act
Information privacy	https://en.wikipedia.org/wiki/Information_privacy
Information privacy law	https://en.wikipedia.org/wiki/Information_privacy_law
Information security	https://en.wikipedia.org/wiki/Information_security
Information Security Governance	https://en.wikipedia.org/wiki/Information_security_governance
Information Security Management	https://en.wikipedia.org/wiki/Information_security_management
Information security policies	https://en.wikipedia.org/wiki/Information_security_policy
Intellectual property	https://en.wikipedia.org/wiki/Intellectual_property
ISO	https://en.wikipedia.org/wiki/International_Organization_for_Standardization
ISO/IEC 27000-Series	https://en.wikipedia.org/wiki/ISO/IEC_27000-series
IT law	https://en.wikipedia.org/wiki/Information_technology_law
NIST SP 800-30 Framework	https://en.wikipedia.org/wiki/IT_risk_management#NIST_SP_800_30_framework
Non-Disclosure Agreement	https://en.wikipedia.org/wiki/Non-disclosure_agreement
OECD Privacy Framework	https://www.oecd.org/sti/ieconomy/oecd_privacy_framework.pdf
Organizational Processes	https://en.wikipedia.org/wiki/Organizational_structure
Patent	https://en.wikipedia.org/wiki/Patent
Patriot Act	https://en.wikipedia.org/wiki/Patriot_Act
PCI-DSS	https://en.wikipedia.org/wiki/Payment_Card_Industry_Data_Security_Standard
Sarbanes-Oxley Act	https://en.wikipedia.org/wiki/Sarbanes–Oxley_Act
Security Breach Notification Laws	https://www.ncsl.org/research/telecommunications-and-information-technology/security-breach-notification-laws.aspx
Trademark	https://en.wikipedia.org/wiki/Trademark
PCI Security Standards Council	https://www.pcisecuritystandards.org/pci_security/
ISO 22301 Standard	https://en.wikipedia.org/wiki/ISO_22301
COBIT ISACA resources	https://www.isaca.org/resources/cobit
Committee of Sponsoring Organizations (COSO)	https://en.wikipedia.org/wiki/Committee_of_Sponsoring_Organizations_of_the_Treadway_Commission
End-User License Agreement (EULA)	https://en.wikipedia.org/wiki/End-user_license_agreement
FedRAMP	https://en.wikipedia.org/wiki/Federal_Risk_and_Authorization_Management_Program
NIST	https://en.wikipedia.org/wiki/National_Institute_of_Standards_and_Technology
NIST SP 800-12 Rev. 1	https://csrc.nist.gov/publications/detail/sp/800-12/rev-1/final
NIST SP 800-37 Rev. 1	https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-37r1.pdf
NIST SP 800-37 Rev. 2	https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-37r2.pdf
NIST SP 800-53	https://en.wikipedia.org/wiki/NIST_Special_Publication_800-53
Security Clearance	https://en.wikipedia.org/wiki/Security_clearance
Data Classification	https://en.wikipedia.org/wiki/Data_classification_(business_intelligence)
Data Collection	https://en.wikipedia.org/wiki/Data_collection
Data Retention	https://en.wikipedia.org/wiki/Data_retention
Privacy by Design	https://en.wikipedia.org/wiki/Privacy_by_design
Cloud Security Alliance (CSA)	https://cloudsecurityalliance.org
Need to know	https://en.wikipedia.org/wiki/Need_to_know
IT Security Audit	https://en.wikipedia.org/wiki/Information_security_audit
Auditing and Logging	https://en.wikipedia.org/wiki/Audit_trail
Information security audit	https://en.wikipedia.org/wiki/Information_technology_security_audit
IT Audits	https://na.theiia.org/standards-guidance/recommended-guidance/practice-guides/Pages/GTAG9.aspx – DEAD
NIST SP 800-115	https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-115.pdf
Security Audits	https://en.wikipedia.org/wiki/Information_technology_audit
NIST SP 800-37	https://en.wikipedia.org/wiki/NIST_Special_Publication_800-37
Internal control	https://en.wikipedia.org/wiki/Internal_control
ISO/IEC 27031 Guidelines	http:https:https://www.iso27001security.com/html/27031.html
NIST SP 800-34 Rev. 1	https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-34r1.pdf
NIST SP 800-92	https://en.wikipedia.org/wiki/NIST_Special_Publication_800-92
Change Management	https://en.wikipedia.org/wiki/Change_management
NIST Publications	https://www.nist.gov/publications
NIST SP 800-128	https://csrc.nist.gov/publications/detail/sp/800-128/final

CISM Domain 2 links:

Description	Link
IT Risk	https://en.wikipedia.org/wiki/IT_risk
IT risk management	https://en.wikipedia.org/wiki/IT_risk_management
Risk	https://en.wikipedia.org/wiki/Risk
Risk – Attackers/Attacks	https://en.wikipedia.org/wiki/Cyberattack
Risk Assessment	https://en.wikipedia.org/wiki/Risk_management#Risk_assessment_and_analysis
Risk Management	https://en.wikipedia.org/wiki/Risk_management
Risk management tools	https://en.wikipedia.org/wiki/Risk_management_tools
Threat Modeling	https://en.wikipedia.org/wiki/Threat_model
Threat Modeling Process Article	https://www.experts-exchange.com/articles/33330/Threat-Modeling-Process-Basics-and-Purpose.html
Key Risk Indicator	https://en.wikipedia.org/wiki/Key_risk_indicator
Supply chain risk management	https://en.wikipedia.org/wiki/Supply_chain_risk_management
Requirements Analysis	https://en.wikipedia.org/wiki/Requirements_analysis
Vulnerability (computing)	https://en.wikipedia.org/wiki/Vulnerability_(computing)
Vulnerability Assessment	https://en.wikipedia.org/wiki/Vulnerability_assessment
Security Assessments	https://en.wikipedia.org/wiki/IT_security_assessment
Vulnerability Assessments vs. Penetration Tests	https://www.experts-exchange.com/articles/31793/Vulnerability-Assessments-versus-Penetration-Tests.html

CISM Domain 3 links:

Description	Link
Separation of duties	https://en.wikipedia.org/wiki/Separation_of_duties
Security Awareness Training	https://en.wikipedia.org/wiki/Internet_Security_Awareness_Training
Software supply chain	https://en.wikipedia.org/wiki/Software_supply_chain
Digital rights management (DRM)	https://en.wikipedia.org/wiki/Digital_rights_management
Asset management	https://en.wikipedia.org/wiki/Asset_management
Software as a Service (SaaS)	https://en.wikipedia.org/wiki/Software_as_a_service
Data at rest	https://en.wikipedia.org/wiki/Data_at_rest
Data Destruction	https://en.wikipedia.org/wiki/Data_erasure
Data in transit	https://en.wikipedia.org/wiki/Data_in_transit
Data in use	https://en.wikipedia.org/wiki/Data_in_use
Data Protection Methods	https://en.wikipedia.org/wiki/Data_protection
Data Remanence	https://en.wikipedia.org/wiki/Data_remanence
Data loss prevention (DLP) software	https://en.wikipedia.org/wiki/Data_loss_prevention_software
Information Lifecycle	https://en.wikipedia.org/wiki/Information_lifecycle_management
Modern Encryption	https://en.wikipedia.org/wiki/Cryptography#Modern_cryptography
Chain of trust	https://en.wikipedia.org/wiki/Chain_of_trust
Firmware	https://en.wikipedia.org/wiki/Firmware
Flash Memory	https://en.wikipedia.org/wiki/Flash_memory
Memory Protection	https://en.wikipedia.org/wiki/Memory_protection
Verification and Validation	https://en.wikipedia.org/wiki/Verification_and_validation
Computer Security	https://en.wikipedia.org/wiki/Computer_security
Security Models	https://en.wikipedia.org/wiki/Computer_security_model
Bell-LaPadula Model	https://en.wikipedia.org/wiki/Bell-LaPadula_model
Biba Model	https://en.wikipedia.org/wiki/Biba_Model
Clark–Wilson model	https://en.wikipedia.org/wiki/Clark–Wilson_model
Graham-Denning Model	https://en.wikipedia.org/wiki/Graham-Denning_model
Physical security	https://en.wikipedia.org/wiki/Physical_security
Cloud Sccess Security Broker (CASB)	https://en.wikipedia.org/wiki/Cloud_access_security_broker
Cloud computing	https://en.wikipedia.org/wiki/Cloud_computing
Cloud computing security	https://en.wikipedia.org/wiki/Cloud_computing_security
Cloud Security Article	https://www.experts-exchange.com/articles/32132/Better-Security-in-the-Cloud.html
Cloud Security Threats Article	https://www.experts-exchange.com/articles/31744/Cloud-Security-Threats-Risks-and-Concerns.html
Containerization	https://en.wikipedia.org/wiki/OS-level_virtualization
Defense in Depth	https://en.wikipedia.org/wiki/Defense_in_depth_(computing)
Distributed Systems	https://en.wikipedia.org/wiki/Distributed_computing
Edge Computing	https://en.wikipedia.org/wiki/Edge_computing
Embedded Systems	https://en.wikipedia.org/wiki/Embedded_system
Hypervisor	https://en.wikipedia.org/wiki/Hypervisor
Industrial Control Systems	https://en.wikipedia.org/wiki/Industrial_control_system
Infrastructure as a Service (IaaS)	https://en.wikipedia.org/wiki/Infrastructure_as_a_service
Internet of things (IoT)	https://en.wikipedia.org/wiki/Internet_of_things
IoT Security Guidelines	https://www.experts-exchange.com/articles/33356/Internet-of-Things-Guidelines-to-prevent-common-IoT-security-risks.html
Platform as a Service (PaaS)	https://en.wikipedia.org/wiki/Platform_as_a_service
Serverless Computing	https://en.wikipedia.org/wiki/Serverless_computing
Virtual Private Cloud	https://en.wikipedia.org/wiki/Virtual_private_cloud
Virtualized Systems	https://en.wikipedia.org/wiki/Virtualization
Asymmetric Encryption	https://en.wikipedia.org/wiki/Public-key_cryptography
Cryptographic Nonce	https://en.wikipedia.org/wiki/Cryptographic_nonce
Cryptography	https://en.wikipedia.org/wiki/Cryptography
Digital Signatures	https://en.wikipedia.org/wiki/Digital_signature
Encryption	https://en.wikipedia.org/wiki/Encryption
Hashing	https://en.wikipedia.org/wiki/Hash_function
Hybrid Cryptosystem	https://en.wikipedia.org/wiki/Hybrid_cryptosystem
Initialization Vector	https://en.wikipedia.org/wiki/Initialization_vector
IPSec	https://en.wikipedia.org/wiki/Ipsec
Key Management	https://en.wikipedia.org/wiki/Key_management
One-Time Pad	https://en.wikipedia.org/wiki/One-time_pad
Pretty Good Privacy (PGP)	https://en.wikipedia.org/wiki/Pretty_Good_Privacy
Public Key Infrastructure	https://en.wikipedia.org/wiki/Public_key_infrastructure
Secure Defaults	https://en.wikipedia.org/wiki/Secure_by_default
Secure Design Principles	https://en.wikipedia.org/wiki/Secure_by_design
Security by Design Principles	https://wiki.owasp.org/index.php/Security_by_Design_Principles
Symmetric Encryption	https://en.wikipedia.org/wiki/Symmetric-key_algorithm
Architectural Design	https://en.wikipedia.org/wiki/Software_architecture
Common Criteria	https://en.wikipedia.org/wiki/Common_Criteria
Covert Channels	https://en.wikipedia.org/wiki/Covert_channel
Emerging Technologies	https://en.wikipedia.org/wiki/Emerging_technologies
Fault Injection	https://en.wikipedia.org/wiki/Fault_injection
Hardware Architecture	https://en.wikipedia.org/wiki/Computer_architecture
Harrison-Ruzzo-Ullman (HRU) Model	https://en.wikipedia.org/wiki/HRU_(security)
Microservices	https://en.wikipedia.org/wiki/Microservices
Multilevel security	https://en.wikipedia.org/wiki/Multilevel_security
Operating System Kernel	https://en.wikipedia.org/wiki/Kernel_(operating_system)
Server (computing)	https://en.wikipedia.org/wiki/Server_(computing)
System integration	https://en.wikipedia.org/wiki/Systems_integration
Trusted Computer System Evaluation Criteria (TCSEC)	https://en.wikipedia.org/wiki/Trusted_Computer_System_Evaluation_Criteria
Trusted Platform Module	https://en.wikipedia.org/wiki/Trusted_Platform_Module
Address Resolution Protocol (ARP)	https://en.wikipedia.org/wiki/Address_Resolution_Protocol
Bluetooth	https://en.wikipedia.org/wiki/Bluetooth
Cellular Network	https://en.wikipedia.org/wiki/Cellular_network
Cellular/Mobile Networks	https://en.wikipedia.org/wiki/Mobile_telephony
Challenge-Handshake Authentication Protocol (CHAP)	https://en.wikipedia.org/wiki/Challenge-Handshake_Authentication_Protocol
Cisco Internetworking Basics	http:https:https://www.ciscopress.com/articles/article.asp?p=31289
Classless Inter-Domain Routing (CIDR)	https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing
Computer Networking	https://en.wikipedia.org/wiki/Computer_network
Content Distribution Networks (CDN)	https://en.wikipedia.org/wiki/Content_delivery_network
Converged Protocols	https://en.wikipedia.org/wiki/Converged_network
Data Communications	https://en.wikipedia.org/wiki/Data_transmission
Distance-Vector Routing Protocol	https://en.wikipedia.org/wiki/Distance-vector_routing_protocol
Domain Name System (DNS)	https://en.wikipedia.org/wiki/Domain_Name_System
Dynamic Host Configuration Protocol (DHCP)	https://en.wikipedia.org/wiki/Dynamic_Host_Configuration_Protocol
Ethernet	https://en.wikipedia.org/wiki/Ethernet
Fiber-Optic	https://en.wikipedia.org/wiki/Fiber-optic_communication
File Transfer Protocol (FTP)	https://en.wikipedia.org/wiki/File_Transfer_Protocol
Firewalls	https://en.wikipedia.org/wiki/Firewall_(computing)
Frame Relay	https://en.wikipedia.org/wiki/Frame_Relay
Global Area Network (GAN)	https://en.wikipedia.org/wiki/Global_area_network
Internet Assigned Numbers Authority (IANA)	https://en.wikipedia.org/wiki/Internet_Assigned_Numbers_Authority
Internet Control Message Protocol (ICMP)	https://en.wikipedia.org/wiki/Internet_Control_Message_Protocol
IP Addresses	https://en.wikipedia.org/wiki/IP_address
IPv4	https://en.wikipedia.org/wiki/IPv4
IPv6	https://en.wikipedia.org/wiki/IPv6
Layer 1-3 Devices	https://en.wikipedia.org/wiki/Networking_hardware
MAC Address	https://en.wikipedia.org/wiki/MAC_address
Micro-Segmentation	https://en.wikipedia.org/wiki/Microsegmentation
Modems	https://en.wikipedia.org/wiki/Modem
Multiprotocol Label Switching (MPLS)	https://en.wikipedia.org/wiki/Multiprotocol_Label_Switching
Network Access Control	https://en.wikipedia.org/wiki/Network_access_control
Network Management	https://en.wikipedia.org/wiki/Network_management
Network Switch	https://en.wikipedia.org/wiki/Network_switch
Network topology	https://en.wikipedia.org/wiki/Network_topology
OSI Model	https://en.wikipedia.org/wiki/OSI_model
Ping Networking Utility	https://en.wikipedia.org/wiki/Ping_(networking_utility)
Quality of Service (QoS)	https://en.wikipedia.org/wiki/Quality_of_service
Remote access service	https://en.wikipedia.org/wiki/Remote_access_service
Remote Desktop Protocol (RDP)	https://en.wikipedia.org/wiki/Remote_Desktop_Protocol
Remote desktop software	https://en.wikipedia.org/wiki/Remote_desktop_software
Router	https://en.wikipedia.org/wiki/Router_(computing)
Routing Protocols	https://en.wikipedia.org/wiki/Routing_protocol
Satellite Internet Access	https://en.wikipedia.org/wiki/Satellite_Internet_access
Secure Access Service Edge	https://en.wikipedia.org/wiki/Secure_access_service_edge
Secure Communication Channels	https://en.wikipedia.org/wiki/Secure_communication
Secure Shell (SSH)	https://en.wikipedia.org/wiki/Secure_Shell
Simple Network Management Protocol (SNMP)	https://en.wikipedia.org/wiki/Simple_Network_Management_Protocol
Software Defined Networks	https://en.wikipedia.org/wiki/Software-defined_networking
TCP and UDP Port Numbers	https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers
TCP/IP Model	https://en.wikipedia.org/wiki/Internet_protocol_suite
Transmission Control Protocol (TCP)	https://en.wikipedia.org/wiki/Transmission_Control_Protocol
Transmission Media	https://en.wikipedia.org/wiki/Transmission_medium
Twisted Pair	https://en.wikipedia.org/wiki/Twisted_pair
User Datagram Protocol (UDP)	https://en.wikipedia.org/wiki/User_Datagram_Protocol
Virtual Private Network (VPN)	https://en.wikipedia.org/wiki/Virtual_private_network
VLAN	https://en.wikipedia.org/wiki/Virtual_LAN
Voice over IP (VoIP)	https://en.wikipedia.org/wiki/Voice_over_IP
WAN Protocols	https://en.wikipedia.org/wiki/Wide_area_network
WiFi	https://en.wikipedia.org/wiki/Wi-Fi
Wireless Access Point	https://en.wikipedia.org/wiki/Wireless_access_point
Wireless LAN	https://en.wikipedia.org/wiki/Wireless_LAN
Wireless Networks	https://en.wikipedia.org/wiki/Wireless_network
Zero Trust	https://en.wikipedia.org/wiki/Zero_trust_security_model
ZigBee	https://en.wikipedia.org/wiki/ZigBee
Transport Layer Security (TLS)	https://en.wikipedia.org/wiki/Transport_Layer_Security
IAAA Framework	https://en.wikipedia.org/wiki/AAA_(computer_security)
Attribute-based access control (ABAC)	https://en.wikipedia.org/wiki/Attribute-based_access_control
Access Control	https://en.wikipedia.org/wiki/Access_control
Access control link 2	https://en.wikipedia.org/wiki/Information_security#Access_control
Access Control Matrix	https://en.wikipedia.org/wiki/Access_Control_Matrix
Access management	https://en.wikipedia.org/wiki/Access_management
Active Directory	https://en.wikipedia.org/wiki/Active_Directory
Authentication	https://en.wikipedia.org/wiki/Authentication
Authorization	https://en.wikipedia.org/wiki/Authorization
Credential Management Systems	https://en.wikipedia.org/wiki/Credential_Management
Discretionary access control (DAC)	https://en.wikipedia.org/wiki/Discretionary_access_control
Federated Identity Management FIDM	https://en.wikipedia.org/wiki/Federated_identity
Identity management	https://en.wikipedia.org/wiki/Identity_management
Identity Provisioning	https://en.wikipedia.org/wiki/Provisioning_(technology)
Identity verification service	https://en.wikipedia.org/wiki/Identity_verification_service
Least Privilege	https://en.wikipedia.org/wiki/Principle_of_least_privilege
Mandatory access control (MAC)	https://en.wikipedia.org/wiki/Mandatory_access_control
Mobile Device Management	https://en.wikipedia.org/wiki/Mobile_device_management
Mobile Device Security	https://en.wikipedia.org/wiki/Mobile_security
Multi-factor authentication	https://en.wikipedia.org/wiki/Multi-factor_authentication
Mutual Authentication	https://en.wikipedia.org/wiki/Mutual_authentication
Network Authentication	https://en.wikipedia.org/wiki/Authentication_protocol
Password Authentication Protocol (PAP)	https://en.wikipedia.org/wiki/Password_Authentication_Protocol
Privilege Escalation	https://en.wikipedia.org/wiki/Privilege_escalation
Role-based access control (RBAC)	https://en.wikipedia.org/wiki/Role-based_access_control
Service Accounts Management	https://en.wikipedia.org/wiki/Service_account
Single Sign-On	https://en.wikipedia.org/wiki/Single_sign-on
System Access	https://en.wikipedia.org/wiki/Access_control#Computer_security
Type 1 Authentication	https://en.wikipedia.org/wiki/Password
Type 3 Authentication	https://en.wikipedia.org/wiki/Biometrics
Challenge-Response Authentication	https://en.wikipedia.org/wiki/Challenge–response_authentication
Extensible Authentication Protocol (EAP)	https://en.wikipedia.org/wiki/Extensible_Authentication_Protocol
Kerberos	https://en.wikipedia.org/wiki/Kerberos_(protocol)
RADIUS	https://en.wikipedia.org/wiki/RADIUS
Salting	https://en.wikipedia.org/wiki/Salt_(cryptography)
Session Management	https://en.wikipedia.org/wiki/Session_(computer_science)
TACACS	https://en.wikipedia.org/wiki/TACACS
Security Account Manager	https://en.wikipedia.org/wiki/Security_Account_Manager
Security Controls Testing	https://en.wikipedia.org/wiki/Security_testing
Vulnerability Mitigation	https://en.wikipedia.org/wiki/Vulnerability_management
Core Security Penetration Testing Services	http:https:https://www.coresecurity.com/
Code Review and Testing	https://en.wikipedia.org/wiki/Code_review
Continuous Monitoring	https://en.wikipedia.org/wiki/Continuous_monitoring
Kali Linux	https://www.kali.org/
Coverage Analysis	https://en.wikipedia.org/wiki/Code_coverage
Dynamic Testing	https://en.wikipedia.org/wiki/Dynamic_testing
Fire Sprinkler System	https://en.wikipedia.org/wiki/Fire_sprinkler_system
Physical Information Security	https://en.wikipedia.org/wiki/Physical_information_security
AI in Security	https://en.wikipedia.org/wiki/Artificial_intelligence_for_cybersecurity
Antivirus software	https://en.wikipedia.org/wiki/Antivirus_software
Application Positive-listing	https://en.wikipedia.org/wiki/Whitelist
Configuration Management	https://en.wikipedia.org/wiki/Configuration_management
Endpoint Security	https://en.wikipedia.org/wiki/Endpoint_security
Keystroke Logging	https://en.wikipedia.org/wiki/Keystroke_logging
Logging and Monitoring	https://en.wikipedia.org/wiki/Log_management
Patch Management	https://en.wikipedia.org/wiki/Patch_(computing)
Sandboxing	https://en.wikipedia.org/wiki/Sandbox_(computer_security)
Security Tools	http:https:https://sectools.org/
SIEM Article	https://www.experts-exchange.com/articles/32316/What-Gives-SIEM-a-Good-Name.html
Software deployment	https://en.wikipedia.org/wiki/Software_deployment
Artificial Intelligence (AI)	https://en.wikipedia.org/wiki/Artificial_intelligence
Managed security service	https://en.wikipedia.org/wiki/Managed_security_service
Managed Services	https://en.wikipedia.org/wiki/Managed_services
API Security	https://en.wikipedia.org/wiki/Application_programming_interface#Security
Application Programming Interface (API)	https://en.wikipedia.org/wiki/API
Database security	https://en.wikipedia.org/wiki/Database_security
Databases	https://en.wikipedia.org/wiki/Database
2021 OWASP Top 10	https://owasp.org/Top10/
Application Security	https://en.wikipedia.org/wiki/Application_security
Buffer Overflow	https://en.wikipedia.org/wiki/Buffer_overflow
CI/CD	https://en.wikipedia.org/wiki/CI/CD
DevOps	https://en.wikipedia.org/wiki/DevOps
Integrated Development Environment	https://en.wikipedia.org/wiki/Integrated_development_environment
Integrated Product Team	https://en.wikipedia.org/wiki/Integrated_product_team
OWASP	https://en.wikipedia.org/wiki/OWASP
OWASP Main Page	https://owasp.org/
OWASP Top 10	https://owasp.org/www-project-top-ten/2017/
OWASP Vulnerability Category	https://owasp.org/www-community/vulnerabilities/
Secure SDLC Principles and Practices	https://www.experts-exchange.com/articles/33288/Secure-SDLC-Principles-and-Practices.html
Software Configuration Management	https://en.wikipedia.org/wiki/Software_configuration_management
Software Vulnerabilities	https://en.wikipedia.org/wiki/Software_vulnerability
Source-Code Security	https://en.wikipedia.org/wiki/Source_code
Agile	https://en.wikipedia.org/wiki/Agile_software_development
All-Pairs Testing	https://en.wikipedia.org/wiki/All-pairs_testing
Continual improvement (CI) process	https://en.wikipedia.org/wiki/Continuous_improvement_process
Secure Coding Guidelines	https://en.wikipedia.org/wiki/Secure_coding
Software development	https://en.wikipedia.org/wiki/Software_development
Software Development Methodologies	https://en.wikipedia.org/wiki/Software_development_process
Software Testing	https://en.wikipedia.org/wiki/Software_testing
Systems development life cycle SDLC	https://en.wikipedia.org/wiki/Systems_development_life_cycle
Version control	https://en.wikipedia.org/wiki/Version_control

CISM Domain 4 links:

Description	Link
Business continuity	https://en.wikipedia.org/wiki/Business_continuity
Business Continuity Planning	https://en.wikipedia.org/wiki/Business_continuity_planning
Cybercrimes/Data Breaches	https://en.wikipedia.org/wiki/Cybercrime
Warfare/Terrorism/Ransomware	https://en.wikipedia.org/wiki/Cyberterrorism
Fire Suppression	https://en.wikipedia.org/wiki/Fire_suppression_system
Attacks on Cryptography	https://en.wikipedia.org/wiki/Cryptanalysis
Brute Force Attack	https://en.wikipedia.org/wiki/Brute-force_attack
MITM Attack	https://en.wikipedia.org/wiki/Man-in-the-middle_attack
Denial-of-Service Attack	https://en.wikipedia.org/wiki/Denial-of-service_attack
Eavesdropping	https://en.wikipedia.org/wiki/Eavesdropping
Intrusion detection system	https://en.wikipedia.org/wiki/Intrusion_detection_system
Social Engineering	https://en.wikipedia.org/wiki/Social_engineering_(security)
0-day Attacks	https://en.wikipedia.org/wiki/Zero-day_(computing)
Pen Testing Tools	https://en.wikipedia.org/wiki/Penetration_test#Tools
Penetration Testing	https://en.wikipedia.org/wiki/Penetration_test
Security Fuzzers	https://en.wikipedia.org/wiki/Fuzzing
Vulnerability Scanners	https://en.wikipedia.org/wiki/Vulnerability_scanner
Metasploit	https://metasploit.com/
Nessus Software	https://en.wikipedia.org/wiki/Nessus_(software)
Password Cracking	https://en.wikipedia.org/wiki/Password_cracking
Rainbow Table	https://en.wikipedia.org/wiki/Rainbow_table
Exception Handling	https://en.wikipedia.org/wiki/Exception_handling
Misuse Case Testing	https://en.wikipedia.org/wiki/Misuse_case
Backup Site	https://en.wikipedia.org/wiki/Backup_site
Backups	https://en.wikipedia.org/wiki/Backup
Computer Security Incident Management	https://en.wikipedia.org/wiki/Computer_security_incident_management
Crisis Management	https://en.wikipedia.org/wiki/Crisis_management
Disaster Recovery	https://en.wikipedia.org/wiki/Disaster_recovery
Disaster Recovery Plan	https://en.wikipedia.org/wiki/Disaster_recovery_plan
Disaster Recovery Solution Design	https://www.experts-exchange.com/articles/33009/Disaster-Recovery-Solution-Design.html
Emergency Management	https://en.wikipedia.org/wiki/Emergency_management
Emergency Operations Center	https://en.wikipedia.org/wiki/Emergency_operations_center
FEMA COOP Planning Template	https://www.fema.gov/sites/default/files/2020-10/fema_planning-template-federal-departments-agencies_october-2020_0.pdf
Incident Management	https://en.wikipedia.org/wiki/Incident_management
Post-Disaster Recovery Planning Forum Notes	https://nws.weather.gov/nthmp/Minutes/oct-nov07/post-disaster_recovery_planning_forum_uo-csc-2.pdf
Recovery Time Objective (RTO)	https://en.wikipedia.org/wiki/Recovery_time_objective
Redundancy	https://en.wikipedia.org/wiki/Redundancy_(engineering)
System Resilience	https://en.wikipedia.org/wiki/High_availability#Resilience
Honeynets/Honeypots	https://en.wikipedia.org/wiki/Honeypot_(computing)
Malware	https://en.wikipedia.org/wiki/Malware
Incident Handling and Response Plan	https://www.experts-exchange.com/articles/31763/Incident-Handling-and-Response-Plan.html
Phishing	https://en.wikipedia.org/wiki/Phishing
Ransomware	https://en.wikipedia.org/wiki/Ransomware
Security information and event management (SIEM)	https://en.wikipedia.org/wiki/Security_information_and_event_management
Security orchestration, automation and response (SOAR)	https://en.wikipedia.org/wiki/Security_orchestration
Chain of custody	https://en.wikipedia.org/wiki/Chain_of_custody
Computer forensics	https://en.wikipedia.org/wiki/Computer_forensics
Digital Forensics	https://en.wikipedia.org/wiki/Digital_forensics
Digital Forensics Tools	https://en.wikipedia.org/wiki/List_of_digital_forensics_tools
Evidence Artifacts	https://en.wikipedia.org/wiki/Digital_artifact
Service-level Agreements	https://en.wikipedia.org/wiki/Service-level_agreement
Threat Intelligence	https://en.wikipedia.org/wiki/Cyber_threat_intelligence
user and entity behavior analytics (UEBA)	https://en.wikipedia.org/wiki/User_behavior_analytics

Remember the CC exam
is FREE right now
isc2.org/landing/1MCC

If used right my course should be enough to pass the CC exam!

💻 17+ hours of CC videos
📝 1,700 CC questions in 17 tests
📝 60 Topic quiz questions after each major knowledge area
🤖 ThorBot: Your 24/7 AI study assistant, clarify concepts, tailor your learning, and enhance your CC preparation.
📖 CC study guides from the lectures (120 pages)
📖 A 2,500 word Glossary
📖 2,500 Flashcards
📖 A CC study plan
📖 CC Mnemonics
📄 Subtitles in English, Spanish (Latin America), French, Arabic, Chinese, and Hindi
🔗 200+ CISSP links
📅 2022 curriculum updated, 2023, and 2024 updated.
📆 Lifetime or 12-months unlimited access
🏅 Certificate of completion with 17 CPEs/CEUs.

If used right my course should be enough to pass the CC exam!

Remember the CC exam
is FREE right now
isc2.org/landing/1MCC

Try our FREE 2,500 term IT and Cybersecurity glossary

Get our FREE CC Mnemonics!

There are not a ton of free study materials for the CC since it is relatively new.
Some of the materials below are for the CISSP, but many topics are relevant.

When you sign up for the exam, you also get a 6-hour video course.
It is not enough to pass the exam on its own but it is a start and it is free.
https://www.isc2.org/landing/1MCC

NIST 800-34 – Contingency Planning Guide for Information Technology Systems https://csrc.nist.gov/publications/detail/sp/800-34/rev-1/final

NIST 800-39 – Managing Information Security Risk: Organization, Mission, and Information System View
https://csrc.nist.gov/publications/detail/sp/800-39/final

NIST 800-86 – Guide to Integrating Forensic Techniques into Incident Response https://csrc.nist.gov/publications/detail/sp/800-86/final

NIST 800-88 – Guidelines for Media Sanitization
https://csrc.nist.gov/publications/detail/sp/800-88/rev-1/final

NIST 800-115 – Technical Guide to Information Security Testing and Assessment
https://csrc.nist.gov/publications/detail/sp/800-115/final

NIST 800-128 – Guide for Security-Focused Configuration Management of Information Systems https://csrc.nist.gov/publications/detail/sp/800-128/final

NIST 800-137 – Information Security Continuous Monitoring
https://csrc.nist.gov/publications/detail/sp/800-137/final

NIST 800-145 – The NIST Definition of Cloud Computing
https://csrc.nist.gov/publications/detail/sp/800-145/final

NIST 800-46 – Guide to Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Security
https://csrc.nist.gov/publications/detail/sp/800-46/rev-2/final

NIST 800-61 Computer Security Incident Handling Guide
https://csrc.nist.gov/publications/detail/sp/800-61/rev-2/final

Study groups and forums

Facebook – CISSP, CISM, CC, and PMP certification training and mentoring by Thor Teaches!

Facebook – Effective CISSP by Wentz Wu

Facebook – CISSP/CC Exam Preparation – Study Notes and Theory!

Discord study group CISSP, CISM, CC, PMP – by Thor Teaches.

Discord study group C ertification Station.

Reddit – ISC2 subreddit!

Infosecinstitute forum!

Free CC CPE’s:

ISC2 explaining how the CPE’s work

ISC2 – 500+ CPE’s available (Webinar).

SANS – 500+ CPE’s available (Webinar).

ISACA – 100+ CPE’s available (Webinar).

Brighttalk – 100s of webcasts for ISC2 CPEs

Infosecurity-magazine + 350+ CPE’s available (Webinar).

wh1t3rabbit – 250+ CPE’s available (Podcast).

OWASP 100+ CPE’s available (Podcast).

Certs.org – 200+ CPE’s available (Podcast).

Edx.org – 250+ CPE’s available (Online training).

Coursera – 250+ CPE’s available (Online training).

Securitytube – 10,000+ CPE’s available (Videos).

Youtube – 100,000+ CPE’s available (Videos).

General Certified in Cybersecurity links:

Description	Link
Cybersecurity Job Openings Article	https://www.forbes.com/sites/stevemorgan/2016/01/02/one-million-cybersecurity-job-openings-in-2016/
Cybersecurity Jobs	https://cybersecurityventures.com/jobs/
CyberSeek Heatmap	https://www.cyberseek.org/heatmap.html
The ThorTeaches Facebook Group	https://www.facebook.com/groups/ThorTeaches
The ThorTeaches Website	https://thorteaches.com/
Cybersecurity Job Market	https://www.forbes.com/sites/stevemorgan/2016/01/02/one-million-cybersecurity-job-openings-in-2016/2/
ISC2	https://en.wikipedia.org/wiki/ISC2
ISC2 Community	https://community.isc2.org/
ISC2 Exam Candidates	https://www.isc2.org/candidate
ISC2 Qualification Pathfinder	https://www.isc2.org/Certifications/Qualification-Pathfinder
Registering for ISC2 Exam	https://www.isc2.org/Register-for-Exam
CC study book on Amazon	https://www.amazon.com/gp/product/1604207515/
ISC2 CC Certification	https://www.isc2.org/Certifications/CC/
ISC2 Cybersecurity Campaign	https://www.isc2.org/landing/1MCC

Domain 1: Security Principles

Description	Link
Computer Fraud and Abuse Act of 1986 (CFAA)	https://en.wikipedia.org/wiki/Computer_Fraud_and_Abuse_Act
CIA Triad	https://en.wikipedia.org/wiki/Information_security#Key_concepts
COBIT	http:https:https://www.isaca.org/Knowledge-Center/COBIT/Pages/Overview.aspx
Computer Ethics Principles	https://en.wikipedia.org/wiki/Computer_Ethics_Institute
Copyright	https://en.wikipedia.org/wiki/Copyright
Copyright Fair Use Index	https://www.copyright.gov/fair-use/
Corporate IT governance	https://en.wikipedia.org/wiki/IT_governance
Due Diligence	https://en.wikipedia.org/wiki/Due_diligence
Electronic Communications Privacy Act of 1986 (ECPA)	https://en.wikipedia.org/wiki/Electronic_Communications_Privacy_Act
EU Artificial Intelligence Act (AI Act)	https://en.wikipedia.org/wiki/Artificial_Intelligence_Act
European Union Agency for Cybersecurity (ENISA)	https://www.enisa.europa.eu/
Framework for Improving Critical Infrastructure Cybersecurity	https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.04162018.pdf
Gap Analysis	https://en.wikipedia.org/wiki/Gap_analysis
General Data Protection Regulation (GDPR)	https://en.wikipedia.org/wiki/General_Data_Protection_Regulation
Gramm-Leach-Bliley Act	https://en.wikipedia.org/wiki/Gramm–Leach–Bliley_Act
Governance, risk management, and compliance (GRC)	https://en.wikipedia.org/wiki/Governance,_risk_management,_and_compliance
HIPAA	https://en.wikipedia.org/wiki/Health_Insurance_Portability_and_Accountability_Act
Information privacy	https://en.wikipedia.org/wiki/Information_privacy
Information privacy law	https://en.wikipedia.org/wiki/Information_privacy_law
Information security	https://en.wikipedia.org/wiki/Information_security
Information Security Governance	https://en.wikipedia.org/wiki/Information_security_governance
Information Security Management	https://en.wikipedia.org/wiki/Information_security_management
Information security policies	https://en.wikipedia.org/wiki/Information_security_policy
Intellectual property	https://en.wikipedia.org/wiki/Intellectual_property
ISO	https://en.wikipedia.org/wiki/International_Organization_for_Standardization
ISO/IEC 27000-Series	https://en.wikipedia.org/wiki/ISO/IEC_27000-series
IT law	https://en.wikipedia.org/wiki/Information_technology_law
NIST SP 800-30 Framework	https://en.wikipedia.org/wiki/IT_risk_management#NIST_SP_800_30_framework
Non-Disclosure Agreement	https://en.wikipedia.org/wiki/Non-disclosure_agreement
OECD Privacy Framework	https://www.oecd.org/sti/ieconomy/oecd_privacy_framework.pdf
Organizational Processes	https://en.wikipedia.org/wiki/Organizational_structure
Patent	https://en.wikipedia.org/wiki/Patent
Patriot Act	https://en.wikipedia.org/wiki/Patriot_Act
PCI-DSS	https://en.wikipedia.org/wiki/Payment_Card_Industry_Data_Security_Standard
Sarbanes-Oxley Act	https://en.wikipedia.org/wiki/Sarbanes–Oxley_Act
Security Breach Notification Laws	https://www.ncsl.org/research/telecommunications-and-information-technology/security-breach-notification-laws.aspx
Trademark	https://en.wikipedia.org/wiki/Trademark
PCI Security Standards Council	https://www.pcisecuritystandards.org/pci_security/
Security Clearance	https://en.wikipedia.org/wiki/Security_clearance
Privacy by Design	https://en.wikipedia.org/wiki/Privacy_by_design
IT Security Audit	https://en.wikipedia.org/wiki/Information_security_audit
Internal control	https://en.wikipedia.org/wiki/Internal_control
IT Risk	https://en.wikipedia.org/wiki/IT_risk
IT risk management	https://en.wikipedia.org/wiki/IT_risk_management
Risk	https://en.wikipedia.org/wiki/Risk
Risk – Attackers/Attacks	https://en.wikipedia.org/wiki/Cyberattack
Risk Assessment	https://en.wikipedia.org/wiki/Risk_management#Risk_assessment_and_analysis
Risk Management	https://en.wikipedia.org/wiki/Risk_management
Risk management tools	https://en.wikipedia.org/wiki/Risk_management_tools
Threat Modeling	https://en.wikipedia.org/wiki/Threat_model
Threat Modeling Process Article	https://www.experts-exchange.com/articles/33330/Threat-Modeling-Process-Basics-and-Purpose.html
Vulnerability (computing)	https://en.wikipedia.org/wiki/Vulnerability_(computing)
Vulnerability Assessment	https://en.wikipedia.org/wiki/Vulnerability_assessment
Separation of duties	https://en.wikipedia.org/wiki/Separation_of_duties
Computer Security	https://en.wikipedia.org/wiki/Computer_security
Security Models	https://en.wikipedia.org/wiki/Computer_security_model
Security Controls Testing	https://en.wikipedia.org/wiki/Security_testing
Vulnerability Mitigation	https://en.wikipedia.org/wiki/Vulnerability_management
Cybercrimes/Data Breaches	https://en.wikipedia.org/wiki/Cybercrime
Warfare/Terrorism/Ransomware	https://en.wikipedia.org/wiki/Cyberterrorism
Social Engineering	https://en.wikipedia.org/wiki/Social_engineering_(security)
ISC2 Ethics	https://www.isc2.org/Ethics
OCTAVE	http:https:https://www.cert.org/resilience/products-services/octave/index.cfm
Brief History of the Internet	https://www.internetsociety.org/internet/history-internet/brief-history-internet-related-networks

Domain 2: Business Continuity (BC), Disaster Recovery (DR) & Incident Response Concepts

Description	Link
ISO 22301 Standard	https://en.wikipedia.org/wiki/ISO_22301
ISO/IEC 27031 Guidelines	http:https:https://www.iso27001security.com/html/27031.html
NIST SP 800-34 Rev. 1	https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-34r1.pdf
Digital rights management (DRM)	https://en.wikipedia.org/wiki/Digital_rights_management
Business continuity	https://en.wikipedia.org/wiki/Business_continuity
Business Continuity Planning	https://en.wikipedia.org/wiki/Business_continuity_planning
Fire Suppression	https://en.wikipedia.org/wiki/Fire_suppression_system
Backup Site	https://en.wikipedia.org/wiki/Backup_site
Backups	https://en.wikipedia.org/wiki/Backup
Computer Security Incident Management	https://en.wikipedia.org/wiki/Computer_security_incident_management
Crisis Management	https://en.wikipedia.org/wiki/Crisis_management
Disaster Recovery	https://en.wikipedia.org/wiki/Disaster_recovery
Disaster Recovery Plan	https://en.wikipedia.org/wiki/Disaster_recovery_plan
Disaster Recovery Solution Design	https://www.experts-exchange.com/articles/33009/Disaster-Recovery-Solution-Design.html
Emergency Management	https://en.wikipedia.org/wiki/Emergency_management
Emergency Operations Center	https://en.wikipedia.org/wiki/Emergency_operations_center
FEMA COOP Planning Template	https://www.fema.gov/sites/default/files/2020-10/fema_planning-template-federal-departments-agencies_october-2020_0.pdf
Incident Management	https://en.wikipedia.org/wiki/Incident_management
Post-Disaster Recovery Planning Forum Notes	https://nws.weather.gov/nthmp/Minutes/oct-nov07/post-disaster_recovery_planning_forum_uo-csc-2.pdf
Recovery Time Objective (RTO)	https://en.wikipedia.org/wiki/Recovery_time_objective
Redundancy	https://en.wikipedia.org/wiki/Redundancy_(engineering)
System Resilience	https://en.wikipedia.org/wiki/High_availability#Resilience
The Business Continuity Institute	https://www.thebci.org/
Mean Time Between Failures (MTBF)	https://en.wikipedia.org/wiki/Mean_time_between_failures
Mean Time To Repair (MTTR)	https://en.wikipedia.org/wiki/Mean_time_to_repair

Domain 3: Access Controls Concepts

Description	Link
Need to know	https://en.wikipedia.org/wiki/Need_to_know
Asset management	https://en.wikipedia.org/wiki/Asset_management
Bell-LaPadula Model	https://en.wikipedia.org/wiki/Bell-LaPadula_model
Biba Model	https://en.wikipedia.org/wiki/Biba_Model
Clark–Wilson model	https://en.wikipedia.org/wiki/Clark–Wilson_model
Graham-Denning Model	https://en.wikipedia.org/wiki/Graham-Denning_model
Physical security	https://en.wikipedia.org/wiki/Physical_security
IAAA Framework	https://en.wikipedia.org/wiki/AAA_(computer_security)
Attribute-based access control (ABAC)	https://en.wikipedia.org/wiki/Attribute-based_access_control
Access Control	https://en.wikipedia.org/wiki/Access_control
Access control link 2	https://en.wikipedia.org/wiki/Information_security#Access_control
Access Control Matrix	https://en.wikipedia.org/wiki/Access_Control_Matrix
Access management	https://en.wikipedia.org/wiki/Access_management
Active Directory	https://en.wikipedia.org/wiki/Active_Directory
Authentication	https://en.wikipedia.org/wiki/Authentication
Authorization	https://en.wikipedia.org/wiki/Authorization
Credential Management Systems	https://en.wikipedia.org/wiki/Credential_Management
Discretionary access control (DAC)	https://en.wikipedia.org/wiki/Discretionary_access_control
Federated Identity Management FIDM	https://en.wikipedia.org/wiki/Federated_identity
Identity management	https://en.wikipedia.org/wiki/Identity_management
Identity Provisioning	https://en.wikipedia.org/wiki/Provisioning_(technology)
Identity verification service	https://en.wikipedia.org/wiki/Identity_verification_service
Least Privilege	https://en.wikipedia.org/wiki/Principle_of_least_privilege
Mandatory access control (MAC)	https://en.wikipedia.org/wiki/Mandatory_access_control
Mobile Device Management	https://en.wikipedia.org/wiki/Mobile_device_management
Mobile Device Security	https://en.wikipedia.org/wiki/Mobile_security
Multi-factor authentication	https://en.wikipedia.org/wiki/Multi-factor_authentication
Mutual Authentication	https://en.wikipedia.org/wiki/Mutual_authentication
Network Authentication	https://en.wikipedia.org/wiki/Authentication_protocol
Password Authentication Protocol (PAP)	https://en.wikipedia.org/wiki/Password_Authentication_Protocol
Privilege Escalation	https://en.wikipedia.org/wiki/Privilege_escalation
Role-based access control (RBAC)	https://en.wikipedia.org/wiki/Role-based_access_control
Service Accounts Management	https://en.wikipedia.org/wiki/Service_account
Single Sign-On	https://en.wikipedia.org/wiki/Single_sign-on
System Access	https://en.wikipedia.org/wiki/Access_control#Computer_security
Type 1 Authentication	https://en.wikipedia.org/wiki/Password
Type 3 Authentication	https://en.wikipedia.org/wiki/Biometrics
Fire Sprinkler System	https://en.wikipedia.org/wiki/Fire_sprinkler_system
Physical Information Security	https://en.wikipedia.org/wiki/Physical_information_security

Domain 4: Network Security

Description	Link
Software as a Service (SaaS)	https://en.wikipedia.org/wiki/Software_as_a_service
Cloud Sccess Security Broker (CASB)	https://en.wikipedia.org/wiki/Cloud_access_security_broker
Cloud computing	https://en.wikipedia.org/wiki/Cloud_computing
Cloud computing security	https://en.wikipedia.org/wiki/Cloud_computing_security
Cloud Security Article	https://www.experts-exchange.com/articles/32132/Better-Security-in-the-Cloud.html
Cloud Security Threats Article	https://www.experts-exchange.com/articles/31744/Cloud-Security-Threats-Risks-and-Concerns.html
Containerization	https://en.wikipedia.org/wiki/OS-level_virtualization
Defense in Depth	https://en.wikipedia.org/wiki/Defense_in_depth_(computing)
Distributed Systems	https://en.wikipedia.org/wiki/Distributed_computing
Edge Computing	https://en.wikipedia.org/wiki/Edge_computing
Embedded Systems	https://en.wikipedia.org/wiki/Embedded_system
Hypervisor	https://en.wikipedia.org/wiki/Hypervisor
Industrial Control Systems	https://en.wikipedia.org/wiki/Industrial_control_system
Infrastructure as a Service (IaaS)	https://en.wikipedia.org/wiki/Infrastructure_as_a_service
Internet of things (IoT)	https://en.wikipedia.org/wiki/Internet_of_things
IoT Security Guidelines	https://www.experts-exchange.com/articles/33356/Internet-of-Things-Guidelines-to-prevent-common-IoT-security-risks.html
Platform as a Service (PaaS)	https://en.wikipedia.org/wiki/Platform_as_a_service
Serverless Computing	https://en.wikipedia.org/wiki/Serverless_computing
Virtual Private Cloud	https://en.wikipedia.org/wiki/Virtual_private_cloud
Virtualized Systems	https://en.wikipedia.org/wiki/Virtualization
Address Resolution Protocol (ARP)	https://en.wikipedia.org/wiki/Address_Resolution_Protocol
Bluetooth	https://en.wikipedia.org/wiki/Bluetooth
Cellular Network	https://en.wikipedia.org/wiki/Cellular_network
Cellular/Mobile Networks	https://en.wikipedia.org/wiki/Mobile_telephony
Challenge-Handshake Authentication Protocol (CHAP)	https://en.wikipedia.org/wiki/Challenge-Handshake_Authentication_Protocol
Cisco Internetworking Basics	http:https:https://www.ciscopress.com/articles/article.asp?p=31289
Classless Inter-Domain Routing (CIDR)	https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing
Computer Networking	https://en.wikipedia.org/wiki/Computer_network
Content Distribution Networks (CDN)	https://en.wikipedia.org/wiki/Content_delivery_network
Converged Protocols	https://en.wikipedia.org/wiki/Converged_network
Data Communications	https://en.wikipedia.org/wiki/Data_transmission
Distance-Vector Routing Protocol	https://en.wikipedia.org/wiki/Distance-vector_routing_protocol
Domain Name System (DNS)	https://en.wikipedia.org/wiki/Domain_Name_System
Dynamic Host Configuration Protocol (DHCP)	https://en.wikipedia.org/wiki/Dynamic_Host_Configuration_Protocol
Ethernet	https://en.wikipedia.org/wiki/Ethernet
Fiber-Optic	https://en.wikipedia.org/wiki/Fiber-optic_communication
File Transfer Protocol (FTP)	https://en.wikipedia.org/wiki/File_Transfer_Protocol
Firewalls	https://en.wikipedia.org/wiki/Firewall_(computing)
Frame Relay	https://en.wikipedia.org/wiki/Frame_Relay
Global Area Network (GAN)	https://en.wikipedia.org/wiki/Global_area_network
Internet Assigned Numbers Authority (IANA)	https://en.wikipedia.org/wiki/Internet_Assigned_Numbers_Authority
Internet Control Message Protocol (ICMP)	https://en.wikipedia.org/wiki/Internet_Control_Message_Protocol
IP Addresses	https://en.wikipedia.org/wiki/IP_address
IPv4	https://en.wikipedia.org/wiki/IPv4
IPv6	https://en.wikipedia.org/wiki/IPv6
Layer 1-3 Devices	https://en.wikipedia.org/wiki/Networking_hardware
MAC Address	https://en.wikipedia.org/wiki/MAC_address
Micro-Segmentation	https://en.wikipedia.org/wiki/Microsegmentation
Modems	https://en.wikipedia.org/wiki/Modem
Multiprotocol Label Switching (MPLS)	https://en.wikipedia.org/wiki/Multiprotocol_Label_Switching
Network Access Control	https://en.wikipedia.org/wiki/Network_access_control
Network Management	https://en.wikipedia.org/wiki/Network_management
Network Switch	https://en.wikipedia.org/wiki/Network_switch
Network topology	https://en.wikipedia.org/wiki/Network_topology
OSI Model	https://en.wikipedia.org/wiki/OSI_model
Ping Networking Utility	https://en.wikipedia.org/wiki/Ping_(networking_utility)
Quality of Service (QoS)	https://en.wikipedia.org/wiki/Quality_of_service
Remote access service	https://en.wikipedia.org/wiki/Remote_access_service
Remote Desktop Protocol (RDP)	https://en.wikipedia.org/wiki/Remote_Desktop_Protocol
Remote desktop software	https://en.wikipedia.org/wiki/Remote_desktop_software
Router	https://en.wikipedia.org/wiki/Router_(computing)
Routing Protocols	https://en.wikipedia.org/wiki/Routing_protocol
Satellite Internet Access	https://en.wikipedia.org/wiki/Satellite_Internet_access
Secure Access Service Edge	https://en.wikipedia.org/wiki/Secure_access_service_edge
Secure Communication Channels	https://en.wikipedia.org/wiki/Secure_communication
Secure Shell (SSH)	https://en.wikipedia.org/wiki/Secure_Shell
Simple Network Management Protocol (SNMP)	https://en.wikipedia.org/wiki/Simple_Network_Management_Protocol
Software Defined Networks	https://en.wikipedia.org/wiki/Software-defined_networking
TCP and UDP Port Numbers	https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers
TCP/IP Model	https://en.wikipedia.org/wiki/Internet_protocol_suite
Transmission Control Protocol (TCP)	https://en.wikipedia.org/wiki/Transmission_Control_Protocol
Transmission Media	https://en.wikipedia.org/wiki/Transmission_medium
Twisted Pair	https://en.wikipedia.org/wiki/Twisted_pair
User Datagram Protocol (UDP)	https://en.wikipedia.org/wiki/User_Datagram_Protocol
Virtual Private Network (VPN)	https://en.wikipedia.org/wiki/Virtual_private_network
VLAN	https://en.wikipedia.org/wiki/Virtual_LAN
Voice over IP (VoIP)	https://en.wikipedia.org/wiki/Voice_over_IP
WAN Protocols	https://en.wikipedia.org/wiki/Wide_area_network
WiFi	https://en.wikipedia.org/wiki/Wi-Fi
Wireless Access Point	https://en.wikipedia.org/wiki/Wireless_access_point
Wireless LAN	https://en.wikipedia.org/wiki/Wireless_LAN
Wireless Networks	https://en.wikipedia.org/wiki/Wireless_network
Zero Trust	https://en.wikipedia.org/wiki/Zero_trust_security_model
ZigBee	https://en.wikipedia.org/wiki/ZigBee
Core Security Penetration Testing Services	http:https:https://www.coresecurity.com/
AI in Security	https://en.wikipedia.org/wiki/Artificial_intelligence_for_cybersecurity
Antivirus software	https://en.wikipedia.org/wiki/Antivirus_software
API Security	https://en.wikipedia.org/wiki/Application_programming_interface#Security
Application Programming Interface (API)	https://en.wikipedia.org/wiki/API
Attacks on Cryptography	https://en.wikipedia.org/wiki/Cryptanalysis
Brute Force Attack	https://en.wikipedia.org/wiki/Brute-force_attack
MITM Attack	https://en.wikipedia.org/wiki/Man-in-the-middle_attack
Denial-of-Service Attack	https://en.wikipedia.org/wiki/Denial-of-service_attack
Eavesdropping	https://en.wikipedia.org/wiki/Eavesdropping
Intrusion detection system	https://en.wikipedia.org/wiki/Intrusion_detection_system
0-day Attacks	https://en.wikipedia.org/wiki/Zero-day_(computing)
Pen Testing Tools	https://en.wikipedia.org/wiki/Penetration_test#Tools
Penetration Testing	https://en.wikipedia.org/wiki/Penetration_test
Security Fuzzers	https://en.wikipedia.org/wiki/Fuzzing
Vulnerability Scanners	https://en.wikipedia.org/wiki/Vulnerability_scanner
Honeynets/Honeypots	https://en.wikipedia.org/wiki/Honeypot_(computing)
Malware	https://en.wikipedia.org/wiki/Malware
Carrier-Sense Multiple Access (CSMA)	https://en.wikipedia.org/wiki/Carrier-sense_multiple_access
Coaxial Cable	https://en.wikipedia.org/wiki/Coaxial_cable
Duplex	https://en.wikipedia.org/wiki/Duplex_(telecommunications)

Domain 5: Security Operations

Description	Link
Data Classification	https://en.wikipedia.org/wiki/Data_classification_(business_intelligence)
Data Collection	https://en.wikipedia.org/wiki/Data_collection
Data Retention	https://en.wikipedia.org/wiki/Data_retention
Auditing and Logging	https://en.wikipedia.org/wiki/Audit_trail
Information security audit	https://en.wikipedia.org/wiki/Information_technology_security_audit
IT Audits	https://na.theiia.org/standards-guidance/recommended-guidance/practice-guides/Pages/GTAG9.aspx – DEAD
NIST SP 800-115	https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-115.pdf
Security Audits	https://en.wikipedia.org/wiki/Information_technology_audit
NIST SP 800-92	https://en.wikipedia.org/wiki/NIST_Special_Publication_800-92
Change Management	https://en.wikipedia.org/wiki/Change_management
Security Assessments	https://en.wikipedia.org/wiki/IT_security_assessment
Vulnerability Assessments vs. Penetration Tests	https://www.experts-exchange.com/articles/31793/Vulnerability-Assessments-versus-Penetration-Tests.html
Security Awareness Training	https://en.wikipedia.org/wiki/Internet_Security_Awareness_Training
Data at rest	https://en.wikipedia.org/wiki/Data_at_rest
Data Destruction	https://en.wikipedia.org/wiki/Data_erasure
Data in transit	https://en.wikipedia.org/wiki/Data_in_transit
Data in use	https://en.wikipedia.org/wiki/Data_in_use
Data Protection Methods	https://en.wikipedia.org/wiki/Data_protection
Data Remanence	https://en.wikipedia.org/wiki/Data_remanence
Data loss prevention (DLP) software	https://en.wikipedia.org/wiki/Data_loss_prevention_software
Information Lifecycle	https://en.wikipedia.org/wiki/Information_lifecycle_management
Modern Encryption	https://en.wikipedia.org/wiki/Cryptography#Modern_cryptography
Asymmetric Encryption	https://en.wikipedia.org/wiki/Public-key_cryptography
Cryptographic Nonce	https://en.wikipedia.org/wiki/Cryptographic_nonce
Cryptography	https://en.wikipedia.org/wiki/Cryptography
Digital Signatures	https://en.wikipedia.org/wiki/Digital_signature
Encryption	https://en.wikipedia.org/wiki/Encryption
Hashing	https://en.wikipedia.org/wiki/Hash_function
Hybrid Cryptosystem	https://en.wikipedia.org/wiki/Hybrid_cryptosystem
Initialization Vector	https://en.wikipedia.org/wiki/Initialization_vector
IPSec	https://en.wikipedia.org/wiki/Ipsec
Key Management	https://en.wikipedia.org/wiki/Key_management
One-Time Pad	https://en.wikipedia.org/wiki/One-time_pad
Pretty Good Privacy (PGP)	https://en.wikipedia.org/wiki/Pretty_Good_Privacy
Public Key Infrastructure	https://en.wikipedia.org/wiki/Public_key_infrastructure
Secure Defaults	https://en.wikipedia.org/wiki/Secure_by_default
Secure Design Principles	https://en.wikipedia.org/wiki/Secure_by_design
Security by Design Principles	https://wiki.owasp.org/index.php/Security_by_Design_Principles
Symmetric Encryption	https://en.wikipedia.org/wiki/Symmetric-key_algorithm
Transport Layer Security (TLS)	https://en.wikipedia.org/wiki/Transport_Layer_Security
Challenge-Response Authentication	https://en.wikipedia.org/wiki/Challenge–response_authentication
Extensible Authentication Protocol (EAP)	https://en.wikipedia.org/wiki/Extensible_Authentication_Protocol
Kerberos	https://en.wikipedia.org/wiki/Kerberos_(protocol)
RADIUS	https://en.wikipedia.org/wiki/RADIUS
Salting	https://en.wikipedia.org/wiki/Salt_(cryptography)
Session Management	https://en.wikipedia.org/wiki/Session_(computer_science)
TACACS	https://en.wikipedia.org/wiki/TACACS
Code Review and Testing	https://en.wikipedia.org/wiki/Code_review
Continuous Monitoring	https://en.wikipedia.org/wiki/Continuous_monitoring
Kali Linux	https://www.kali.org/
Application Positive-listing	https://en.wikipedia.org/wiki/Whitelist
Configuration Management	https://en.wikipedia.org/wiki/Configuration_management
Endpoint Security	https://en.wikipedia.org/wiki/Endpoint_security
Keystroke Logging	https://en.wikipedia.org/wiki/Keystroke_logging
Logging and Monitoring	https://en.wikipedia.org/wiki/Log_management
Patch Management	https://en.wikipedia.org/wiki/Patch_(computing)
Sandboxing	https://en.wikipedia.org/wiki/Sandbox_(computer_security)
Security Tools	http:https:https://sectools.org/
SIEM Article	https://www.experts-exchange.com/articles/32316/What-Gives-SIEM-a-Good-Name.html
Software deployment	https://en.wikipedia.org/wiki/Software_deployment
Database security	https://en.wikipedia.org/wiki/Database_security
Databases	https://en.wikipedia.org/wiki/Database
2021 OWASP Top 10	https://owasp.org/Top10/
Application Security	https://en.wikipedia.org/wiki/Application_security
Buffer Overflow	https://en.wikipedia.org/wiki/Buffer_overflow
CI/CD	https://en.wikipedia.org/wiki/CI/CD
DevOps	https://en.wikipedia.org/wiki/DevOps
Integrated Development Environment	https://en.wikipedia.org/wiki/Integrated_development_environment
Integrated Product Team	https://en.wikipedia.org/wiki/Integrated_product_team
OWASP	https://en.wikipedia.org/wiki/OWASP
OWASP Main Page	https://owasp.org/
OWASP Top 10	https://owasp.org/www-project-top-ten/2017/
OWASP Vulnerability Category	https://owasp.org/www-community/vulnerabilities/
Secure SDLC Principles and Practices	https://www.experts-exchange.com/articles/33288/Secure-SDLC-Principles-and-Practices.html
Software Configuration Management	https://en.wikipedia.org/wiki/Software_configuration_management
Software Vulnerabilities	https://en.wikipedia.org/wiki/Software_vulnerability
Source-Code Security	https://en.wikipedia.org/wiki/Source_code
Metasploit	https://metasploit.com/
Nessus Software	https://en.wikipedia.org/wiki/Nessus_(software)
Password Cracking	https://en.wikipedia.org/wiki/Password_cracking
Rainbow Table	https://en.wikipedia.org/wiki/Rainbow_table
Incident Handling and Response Plan	https://www.experts-exchange.com/articles/31763/Incident-Handling-and-Response-Plan.html
Phishing	https://en.wikipedia.org/wiki/Phishing
Ransomware	https://en.wikipedia.org/wiki/Ransomware
Security information and event management (SIEM)	https://en.wikipedia.org/wiki/Security_information_and_event_management
Security orchestration, automation and response (SOAR)	https://en.wikipedia.org/wiki/Security_orchestration
History of Cryptography	https://en.wikipedia.org/wiki/History_of_cryptography

Our study material recommendations.

Get our FREE CISSP/CISM Mnemonics!

Study Guides:

Other:

CISSP Free CPE’s: ISC2 explaining how the CPE’s work

ISC2 – 500+ CPE’s available (Webinar).

If a link is broken please let me know so I can fix it!

ISC2 and the CISSP certification links:

CISSP certification 2021 Domain (Common body of knowledge) domains:

Domain 1: Security and Risk Management

Domain 2: Asset Security

Domain 3: Security Architecture and Engineering

Domain 4: Communication and Network Security

Domain 5: Identity and Access Management (IAM)

Domain 6: Security Assessment and Testing

Domain 7: Security Operations

Domain 8: Software Development Security

Get our FREE CISSP/CISM Mnemonics!

General CISM and ISACA links:

If a link is broken please let me know so I can fix it!

CISM Domain 1 links:

CISM Domain 2 links:

CISM Domain 3 links:

CISM Domain 4 links:

Remember the CC exam is FREE right nowisc2.org/landing/1MCC

Remember the CC exam is FREE right nowisc2.org/landing/1MCC

Get our FREE CC Mnemonics!

Free questions:

Study Guides:

Other:

All relevant NIST documents

Free CC CPE’s:

Remember the CC exam
is FREE right now
isc2.org/landing/1MCC

Remember the CC exam
is FREE right now
isc2.org/landing/1MCC