Adam Gordon

Produced by (ISC)2 providing an in-depth look at the six domains of the CCSP Common Body of Knowledge - includes real-world examples, illustrations and diagrams, tables, best practices, and sample questions on Architectural Concepts & Design Requirements, Cloud Data Security, Cloud Platform & Infrastructure Security, Cloud Application Security, Operations, and Legal & Compliance topics.

"Every IT professional plays a key role in an organization's security posture. The fourth edition of The Official (ISC)2 Guide to the SSCP CBK facilitates the practical knowledge you need to assure strong information security in daily operations."
– David Shearer, Chief Executive Officer, (ISC)2

Without the right people, no organization is secure. Attacks on organizations' information assets continue to escalate while attackers refine and improve their tactics. Organizations know the… Show more

"Every IT professional plays a key role in an organization's security posture. The fourth edition of The Official (ISC)2 Guide to the SSCP CBK facilitates the practical knowledge you need to assure strong information security in daily operations."
– David Shearer, Chief Executive Officer, (ISC)2

Without the right people, no organization is secure. Attacks on organizations' information assets continue to escalate while attackers refine and improve their tactics. Organizations know the best way to combat these assaults starts with qualified information security staff armed with appropriate practices and controls. They know that a Systems Security Certified Practitioner (SSCP®) has the right technical security knowledge needed to be successful on their team.
The fourth edition of The Official (ISC)2® Guide to the SSCP® CBK® is a comprehensive resource providing an in-depth look at the seven domains of the SSCP Common Body of Knowledge (CBK). This latest edition provides an updated, detailed guide that is considered one of the best tools for candidates striving to become an SSCP.

Numerous illustrated examples and tables are included to demonstrate concepts, frameworks, and real-life scenarios. The book offers step-by-step guidance through each of the SSCP domains, including best practices and techniques used by the world's most experienced practitioners. Endorsed by (ISC)2 and compiled and reviewed by SSCPs and subject matter experts, this book brings together a global, thorough perspective. The Official (ISC)2 Guide to the SSCP CBK prepares candidates for the SSCP exam, and provides a reference that will serve them well into their careers.
Show less

"To help facilitate the knowledge you need to assure strong information security in the cloud, I'm very pleased to present the first edition of the Official (ISC)2 Guide to the CCSP (Certified Cloud Security Professional) CBK."
–David Shearer, CISSP, PMP, Chief Executive Officer, (ISC)2

As powerful as cloud computing is for the organization, understanding its information security risks and mitigation strategies is critical. Securing 'the cloud' requires modified approaches and tools… Show more

"To help facilitate the knowledge you need to assure strong information security in the cloud, I'm very pleased to present the first edition of the Official (ISC)2 Guide to the CCSP (Certified Cloud Security Professional) CBK."
–David Shearer, CISSP, PMP, Chief Executive Officer, (ISC)2

As powerful as cloud computing is for the organization, understanding its information security risks and mitigation strategies is critical. Securing 'the cloud' requires modified approaches and tools — legacy practices are inadequate. Clearly, it is essential for organizations to utilize information technology professionals who understand how cloud services can be securely implemented and managed within their organization's IT strategy and governance requirements.
The new Official (ISC)2® Guide to the CCSPSM CBK® is a comprehensive resource providing an in-depth look at the six domains of the CCSP Common Body of Knowledge (CBK). This edition provides a current, detailed guide that is considered one of the best tools for candidates striving to become a CCSP.
Numerous illustrated examples and tables are included to demonstrate concepts, frameworks and real-life scenarios. The book offers step-by-step guidance through each of CCSP's domains, including best practices and techniques used by the world's most experienced practitioners. Developed by (ISC)2, endorsed by the Cloud Security Alliance® (CSA) and compiled and reviewed by cloud security experts across the world, this book brings together a global, thorough perspective. The Official (ISC)2 Guide to the CCSP CBK should be utilized as your fundamental study tool in preparation for the CCSP exam and provides a comprehensive reference that will serve you for years to come. Show less

The (ISC)2 Systems Security Certified Practitioner (SSCP) certification is one of the most popular and ideal credential for those wanting to expand their security career and highlight their security skills. If you are looking to embark on the journey towards your (SSCP) certification then the Official (ISC)2 Guide to the SSCP CBK is your trusted study companion. This step-by-step, updated 3rd Edition provides expert instruction and extensive coverage of all 7 domains and makes learning and… Show more

The (ISC)2 Systems Security Certified Practitioner (SSCP) certification is one of the most popular and ideal credential for those wanting to expand their security career and highlight their security skills. If you are looking to embark on the journey towards your (SSCP) certification then the Official (ISC)2 Guide to the SSCP CBK is your trusted study companion. This step-by-step, updated 3rd Edition provides expert instruction and extensive coverage of all 7 domains and makes learning and retaining easy through real-life scenarios, sample exam questions, illustrated examples, tables, and best practices and techniques. Endorsed by (ISC)² and compiled and reviewed by leading experts, you will be confident going into exam day. Easy-to-follow content guides you through

Major topics and subtopics within the 7 domains
Detailed description of exam format
Exam registration and administration policies

Clear, concise, instruction from SSCP certified experts will provide the confidence you need on test day and beyond. Official (ISC)2 Guide to the SSCP CBK is your ticket to becoming a Systems Security Certified Practitioner (SSCP) and more seasoned information security practitioner. Show less

Refreshed technical content has been added to the official (ISC)² CISSP CBK to reflect the most current topics in the information security industry today. Some topics have been expanded (e.g., asset security, security assessment and testing), while other topics have been realigned under different domains. The result is an exam that most accurately reflects the technical and managerial competence required from an experienced information security professional to effectively design, engineer… Show more

Refreshed technical content has been added to the official (ISC)² CISSP CBK to reflect the most current topics in the information security industry today. Some topics have been expanded (e.g., asset security, security assessment and testing), while other topics have been realigned under different domains. The result is an exam that most accurately reflects the technical and managerial competence required from an experienced information security professional to effectively design, engineer, implement and manage an organization’s information security program within an ever-changing security landscape.

The domain names have been updated as follows:

CISSP Domains, Effective April 15, 2015

Security and Risk Management (Security, Risk, Compliance, Law, Regulations, Business Continuity)
Asset Security (Protecting Security of Assets)
Security Engineering (Engineering and Management of Security)
Communications and Network Security (Designing and Protecting Network Security)
Identity and Access Management (Controlling Access and Managing Identity)
Security Assessment and Testing (Designing, Performing, and Analyzing Security Testing)
Security Operations (Foundational Concepts, Investigations, Incident Management, Disaster Recovery)
Software Development Security (Understanding, Applying, and Enforcing Software Security)
Some candidates may be wondering how these updates affect training materials for the CISSP credential. As part of the organization’s comprehensive education strategy and certifying body best practices, (ISC)² training materials do not teach directly to its credential examinations. Rather, (ISC)² Education is focused on teaching the core competencies relevant to the roles and responsibilities of today’s practicing information security professional. It is designed to refresh and enhance the knowledge of experienced industry professionals. Show less

Candidates for the CISSP-ISSAP professional certification need to not only demonstrate a thorough understanding of the six domains of the ISSAP CBK, but also need to have the ability to apply this in-depth knowledge to develop a detailed security architecture.

Supplying an authoritative review of the key concepts and requirements of the ISSAP CBK, the Official (ISC)2® Guide to the ISSAP® CBK®, Second Edition provides the practical understanding required to implement the latest security… Show more

Candidates for the CISSP-ISSAP professional certification need to not only demonstrate a thorough understanding of the six domains of the ISSAP CBK, but also need to have the ability to apply this in-depth knowledge to develop a detailed security architecture.

Supplying an authoritative review of the key concepts and requirements of the ISSAP CBK, the Official (ISC)2® Guide to the ISSAP® CBK®, Second Edition provides the practical understanding required to implement the latest security protocols to improve productivity, profitability, security, and efficiency. Encompassing all of the knowledge elements needed to create secure architectures, the text covers the six domains: Access Control Systems and Methodology, Communications and Network Security, Cryptology, Security Architecture Analysis, BCP/DRP, and Physical Security Considerations. Show less

The most complete compendium of industry knowledge compiled by the foremost experts in global security. A must-have for those seeking to attain the Certified Information Systems Security Professional (CISSP) credential.