Segment 1:Domain 1 Security and Risk Management

Length:85 minutes (10-minute break at the halfway mark)

Governance, threat modeling, risk management, and resiliency concepts

10-minute break

Segment 2:Domain 2 Asset Security

Length:30 minutes

Asset management and information lifecycle topics

10-minute break

Segment 3:Domain 3 Security Architecture and Engineering

Length: 85 minutes (10 minutes break at the halfway mark)

Security design principles, models and practices, security capabilities of information systems, assess and mitigate security architecture vulnerabilities, and apply cryptography

10-minute break

Segment 4:Test-Taking Strategies

Length: 10 minutes

Test-taking strategies and study plans

Segment 5:Domain 4 Communication and Network Security

Length:45 minutes

Securing network and communications infrastructure, and preventing and mitigating network attacks

10-Minute Break

Segment 6:Domain 5 Identity and Access Management (IAM)

Length:30 minutes

Identity and authentication management, controlling access, implementing authorization mechanisms, and managing the provisioning lifecycle

5-Minute Break

Segment 7:Domain 6 Security Assessment and Testing

Length: 30 minutes          

Designing and validating assessment, test and audit strategies, security controls testing, collecting security process data and analyzing output

5-minute break

Segment 8:Domain 7 Security Operations

Length: 60 minutes

Ongoing security operations including configuration and change control, vulnerability and patch management, problem and incident management, disaster recovery, business continuity planning and preparation, investigative support, and personnel safety and security.

10-minute break

Segment 9:Domain 8 Software Development Security

Length: 45 minutes

Secure software development, source code assessment, and acquisition implementation. 

Segment 10:Preparing for Test Day

Length: 10 minutes

Strategies for developing a study plan, getting ready for test day, what to expect at the testing center, and how to maintain your CISSP certification