No matching guide sections
Change the search or section filter.
Study Guide preview
Unlock Pro for every CISSP flashcard-note lesson.
Preview the beginning of Section 1. Pro includes the complete Study Guide by section, plus Course Notes, guided course access, and Pro downloads.
Unlock with Pro
Opens the CISSP Practice Test purchase options.
Section 1
Apply risk management
Preview
Preview: 1. Security and Risk Management (16%)
Preview includes- 4 of 8 lesson topics
- 1 overview segment
- 3 core concepts
- 2 exam tips
Lesson Topics
- Authorization Process Overview
- Authorizing Official Role & Risk Acceptance
- Authorization Package Contents
- System vs. Common Controls Authorization
Overview
This objective focuses on the process of applying risk management, specifically the authorization process, within the NIST Risk Management Framework. The authorizing official’s role is to review security and privacy information, determine if the risk of operating a system or providing common controls is acceptable, and explicitly accept that risk.
Core Concepts
- The authorizing official’s acceptance of risk is a key decision point. This acceptance is based on a thorough review of security and privacy information presented in an authorization package.
- Common controls, inherited by multiple systems, represent a streamlined approach to risk management, but require careful consideration within the system authorization process.
- Risk tolerance directly influences the level of risk accepted and drives decisions regarding security and privacy controls.
Exam Tips
- Focus on the authorizing official’s role and responsibilities throughout the authorization process.
- Understand the purpose and contents of the authorization package – it’s the foundation for risk acceptance.
Section 1 continues in Pro.Unlock Pro to read the full Apply risk management lesson plus every remaining CISSP Study Guide section.
Unlock with Pro
Section 2
Evaluate legal and regulatory requirements
Pro
Evaluate legal and regulatory requirements unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 3
Apply control; authorization decisions
Pro
Apply control; authorization decisions unlocks with Pro.Unlock Pro to read the full 4 topics flashcard-note study guide for this section.
Unlock with Pro
Section 4
Apply risk; control; authorization decisions
Pro
Apply risk; control; authorization decisions unlocks with Pro.Unlock Pro to read the full 4 topics flashcard-note study guide for this section.
Unlock with Pro
Section 5
Apply risk; control; privacy decisions
Pro
Apply risk; control; privacy decisions unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 6
Develop security policy and awareness
Pro
Develop security policy and awareness unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 7
Apply risk decisions
Pro
Apply risk decisions unlocks with Pro.Unlock Pro to read the full 4 topics flashcard-note study guide for this section.
Unlock with Pro
Section 8
Plan business continuity
Pro
Plan business continuity unlocks with Pro.Unlock Pro to read the full 4 topics flashcard-note study guide for this section.
Unlock with Pro
Section 9
Apply control; privacy decisions
Pro
Apply control; privacy decisions unlocks with Pro.Unlock Pro to read the full 3 topics flashcard-note study guide for this section.
Unlock with Pro
Section 10
Identify and classify information and assets
Pro
Identify and classify information and assets unlocks with Pro.Unlock Pro to read the full 4 topics flashcard-note study guide for this section.
Unlock with Pro
Section 11
Apply sanitization; media decisions
Pro
Apply sanitization; media decisions unlocks with Pro.Unlock Pro to read the full 8 topics flashcard-note study guide for this section.
Unlock with Pro
Section 12
Establish handling requirements
Pro
Establish handling requirements unlocks with Pro.Unlock Pro to read the full 3 topics flashcard-note study guide for this section.
Unlock with Pro
Section 13
Apply data protection methods
Pro
Apply data protection methods unlocks with Pro.Unlock Pro to read the full 4 topics flashcard-note study guide for this section.
Unlock with Pro
Section 14
Manage the information life cycle
Pro
Manage the information life cycle unlocks with Pro.Unlock Pro to read the full 4 topics flashcard-note study guide for this section.
Unlock with Pro
Section 15
Apply secure data destruction
Pro
Apply secure data destruction unlocks with Pro.Unlock Pro to read the full 3 topics flashcard-note study guide for this section.
Unlock with Pro
Section 16
Apply impact; sanitization; media decisions
Pro
Apply impact; sanitization; media decisions unlocks with Pro.Unlock Pro to read the full 4 topics flashcard-note study guide for this section.
Unlock with Pro
Section 17
Apply key decisions
Pro
Apply key decisions unlocks with Pro.Unlock Pro to read the full 4 topics flashcard-note study guide for this section.
Unlock with Pro
Section 18
Apply cryptographic solutions
Pro
Apply cryptographic solutions unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 19
Evaluate system security architecture
Pro
Evaluate system security architecture unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 20
Apply secure design principles
Pro
Apply secure design principles unlocks with Pro.Unlock Pro to read the full 4 topics flashcard-note study guide for this section.
Unlock with Pro
Section 21
Apply secure network architecture
Pro
Apply secure network architecture unlocks with Pro.Unlock Pro to read the full 7 topics flashcard-note study guide for this section.
Unlock with Pro
Section 22
Assess network attacks
Pro
Assess network attacks unlocks with Pro.Unlock Pro to read the full 4 topics flashcard-note study guide for this section.
Unlock with Pro
Section 23
Apply segmentation and access control
Pro
Apply segmentation and access control unlocks with Pro.Unlock Pro to read the full 4 topics flashcard-note study guide for this section.
Unlock with Pro
Section 24
Control physical and logical access
Pro
Control physical and logical access unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 25
Federate identity
Pro
Federate identity unlocks with Pro.Unlock Pro to read the full 4 topics flashcard-note study guide for this section.
Unlock with Pro
Section 26
Implement access-control models
Pro
Implement access-control models unlocks with Pro.Unlock Pro to read the full 4 topics flashcard-note study guide for this section.
Unlock with Pro
Section 27
Manage identification and authentication
Pro
Manage identification and authentication unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 28
Design assessment strategies
Pro
Design assessment strategies unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 29
Test security controls
Pro
Test security controls unlocks with Pro.Unlock Pro to read the full 4 topics flashcard-note study guide for this section.
Unlock with Pro
Section 30
Apply incident management
Pro
Apply incident management unlocks with Pro.Unlock Pro to read the full 8 topics flashcard-note study guide for this section.
Unlock with Pro
Section 31
Protect personnel and facilities
Pro
Protect personnel and facilities unlocks with Pro.Unlock Pro to read the full 4 topics flashcard-note study guide for this section.
Unlock with Pro
Section 32
Manage logging and monitoring
Pro
Manage logging and monitoring unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 33
Apply recovery strategies
Pro
Apply recovery strategies unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 34
Apply log; event decisions
Pro
Apply log; event decisions unlocks with Pro.Unlock Pro to read the full 4 topics flashcard-note study guide for this section.
Unlock with Pro
Section 35
Apply software security controls
Pro
Apply software security controls unlocks with Pro.Unlock Pro to read the full 4 topics flashcard-note study guide for this section.
Unlock with Pro
Section 36
Manage software supply-chain risk
Pro
Manage software supply-chain risk unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 37
Select application security testing
Pro
Select application security testing unlocks with Pro.Unlock Pro to read the full 4 topics flashcard-note study guide for this section.
Unlock with Pro
Section 38
Apply secure coding
Pro
Apply secure coding unlocks with Pro.Unlock Pro to read the full 4 topics flashcard-note study guide for this section.
Unlock with Pro
Section 39
Apply code decisions
Pro
Apply code decisions unlocks with Pro.Unlock Pro to read the full 4 topics flashcard-note study guide for this section.
Unlock with Pro