CISSP Guide to Security Essentials

Covering the complete CISSP common body of knowledge within a single, comprehensive guide, this trusted text is ideal for anyone pursuing the advanced certification that has become the standard for the global information security industry, as well as the U.S. Department of Defense and National Security Agency.

Following an introduction that briefly reviews the current state of information security, the text dedicates individual chapters to each of the ten CISSP domains, enabling users to focus on each one in great depth, and to direct their review and exam preparation efforts where they need the most support.

After briefly discussing essential theory and concepts relevant to a specific domain, each chapter features a strong practical focus, emphasizing real-world examples, hands-on exercises, and a variety of learning tools to support exam preparation, including key terms, chapter summaries, and study questions.

Developed by the author of more than 30 books on information and business security—the text reflects the invaluable perspective of a security professional with more than 25 years of industry experience.

To complement the core chapter content, a premium website features expanded information and resources, including additional exam practice questions.

The Second Edition includes extensive updates throughout the text to reflect important new industry practices, evolving technology, emerging threats, and effective new means of system and data protection.

The author has added new material on cloud systems threats and countermeasures, data jurisdiction, data sovereignty, access control processes, operating systems, software attack objectives, the BCP and DRP life cycles, the security incident response process, root cause analysis, threat modeling, source code scanning, and data leakage prevention systems.

Updated study questions across the ten CISSP domains reflect the latest trends, technology, and practices users will need to master to achieve professional success and prepare for the certification exam.

New and updated study problems and case projects feature highly relevant examples and real-world scenarios that today's information security professionals are likely to encounter.