CISSP

Month 1: Foundations and Security and Risk Management

Week 1: Introduction and Study Planning

• Day 1-2: Understand the CISSP exam format and requirements.
• Day 3-4: Obtain study materials (CISSP Study Guide, Official (ISC)² CISSP CBK, practice exams).
• Day 5-7: Create a detailed study schedule and set up a study environment.

Week 2: Security and Risk Management (Domain 1)

• Day 1: Introduction to Security and Risk Management concepts.
• Day 2-3: Study Risk Management (Risk Assessment, Risk Analysis, Risk Treatment).
• Day 4-5: Review Legal, Regulatory, and Compliance issues.
• Day 6-7: Understand Business Continuity and Disaster Recovery.

Week 3: Security and Risk Management (Domain 1) - Continued

• Day 1-2: Delve into Security Governance Principles.
• Day 3-4: Learn about Policies, Standards, Procedures, and Guidelines.
• Day 5-6: Study Security Awareness, Training, and Education.
• Day 7: Review and take practice quizzes for Domain 1.

Week 4: Asset Security (Domain 2)

• Day 1-2: Introduction to Asset Security concepts.
• Day 3-4: Study Information and Asset Classification.
• Day 5-6: Learn about Ownership (Data Owners, System Owners, etc.).
• Day 7: Review and take practice quizzes for Domain 2.
•  

Month 2: Communication, Network Security, and Identity and Access Management

Week 5: Security Architecture and Engineering (Domain 3)

• Day 1-2: Introduction to Security Architecture and Engineering.
• Day 3-4: Study Secure Design Principles.
• Day 5-6: Learn about Security Models and Security Evaluation Models.
• Day 7: Review and take practice quizzes for Domain 3.

Week 6: Communication and Network Security (Domain 4)

• Day 1-2: Introduction to Communication and Network Security.
• Day 3-4: Study Network Architecture and Design.
• Day 5-6: Learn about Network Protocols and Security.
• Day 7: Review and take practice quizzes for Domain 4.

Week 7: Communication and Network Security (Domain 4) - Continued

• Day 1-2: Delve into Securing Network Components.
• Day 3-4: Study Secure Communication Channels.
• Day 5-6: Learn about Network Attacks and Countermeasures.
• Day 7: Review and take practice quizzes for Domain 4.

Week 8: Identity and Access Management (IAM) (Domain 5)

• Day 1-2: Introduction to IAM concepts.
• Day 3-4: Study Access Control Systems.
• Day 5-6: Learn about Identity as a Service (IDaaS).
• Day 7: Review and take practice quizzes for Domain 5.
•  

Month 3: Security Operations, Software Development Security, and Review

Week 9: Security Assessment and Testing (Domain 6)

• Day 1-2: Introduction to Security Assessment and Testing.
• Day 3-4: Study Assessment and Testing Strategies.
• Day 5-6: Learn about Security Control Testing.
• Day 7: Review and take practice quizzes for Domain 6.

Week 10: Security Operations (Domain 7)

• Day 1-2: Introduction to Security Operations.
• Day 3-4: Study Investigations and Incident Management.
• Day 5-6: Learn about Disaster Recovery Planning.
• Day 7: Review and take practice quizzes for Domain 7.

Week 11: Software Development Security (Domain 8)

• Day 1-2: Introduction to Software Development Security.
• Day 3-4: Study Secure Software Development Lifecycle.
• Day 5-6: Learn about Security Controls in Development Processes.
• Day 7: Review and take practice quizzes for Domain 8.

Week 12: Final Review and Practice Exams

• Day 1-2: Review all eight domains and focus on weak areas.
• Day 3-4: Take a full-length practice exam under timed conditions.
• Day 5-6: Review the practice exam results and go over incorrect answers.
• Day 7: Final review and relaxation.