CISSP — Certified Information Systems Security Professional

Exam CISSP ISC2 Advanced

The senior security certification, spanning eight domains. Requires five years of experience to certify fully. This is the management and architecture track, not a hands-on one. ISC2's new CISSP exam outline applies from 15 April 2027. This roadmap teaches the April 2024 outline, which applies before then. Check which one you will sit.

16 courses · 66 sections · 737 lectures · 71 labs · ≈ 70 h of hands-on labs

All 71 CISSP hands-on labs on one page →

Free to start: the free lessons and guides for this roadmap →

Exam domains

Security and Risk Management — 16%
Asset Security — 10%
Security Architecture and Engineering — 13%
Communication and Network Security — 13%
Identity and Access Management — 13%
Security Assessment and Testing — 12%
Security Operations — 13%
Software Development Security — 10%

FreeThe 8 CISSP Domains Explained

Try a free hacking lab: Recon to shell (~5 min) → A scripted simulation in your browser. No account needed.

The path

Start here →

Step 1 — Start here

Understand the exam, the CAT format and how to study for it. Prefer one course for all eight domains? The full CISSP course covers them end to end; the boot camps below go domain by domain.

2 courses · 19 sections · 300 lectures

Learn

CourseCISSP Certification Introduction. Prepare for the exam right (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
7 sections · 25 lectures
1. Training Overview 2
2. Introduction to CISSP essentials 1
3. Reasons why the CISSP certification is the answer and the 8 domains it contains. 2
4. The study process, material, tips, tricks and practice tests! 10
5. The exam itself and what happens after, how you keep your certification active! 8
6. Bonus lectures! 1
7. Audio Version of Training 1
CourseCertified Information Systems Security Professional - CISSP (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
12 sections · 275 lectures
1. Training Overview 2
2. Introduction 4
3. Course Introduction 8
4. Domain 1: Security and Risk Management 64
5. Domain 2: Asset Security 21
6. Domain 3: Security Architecture and Engineering 39
7. Domain 4: Communication and Network Security 23
8. Domain 5: Identity and Access Management (IAM) 14
9. Cloud Security 21
10. Domain 6: Security Assessment and Testing 31
11. Domain 7: Security Operations 41
12. Domain 8: Software Development Security 7

Free resources

Step 2 — Domains 1 & 2 — risk and asset security

Governance, risk, compliance and data protection.

1 course · 8 sections · 88 lectures

Learn

CourseCISSP Certification: CISSP Domain 1 & 2 Video Boot Camp (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
8 sections · 88 lectures
1. Introduction 4
2. CISSP Domain 1: Security and Risk Management 48
3. CISSP Domain 2: Asset Security 19
4. (Bonus) Build your CISSP study plan and how to deconstruct CISSP exam questions 3
5. (Bonus) Practical information - Scheduling the exam, exam day and after 6
6. (Bonus) Why you need to get CISSP certified and the 8 CISSP domains. 2
7. (Bonus) How to find the right study materials for your CISSP studying. 5
8. Bonus lecture. 1

Free resources

Step 3 — Domains 3 & 4 — architecture and network security

Secure design principles, cryptography and PKI, and network defence.

1 course · 6 sections · 124 lectures · 23 labs

Learn

CourseCISSP Certification: CISSP Domain 3 & 4 Video Boot Camp (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
6 sections · 124 lectures
1. Introduction 1
2. Other practical information. 3
3. CISSP Domain 3: Security Architecture and Engineering. 79
4. CISSP Domain 4: Communications and Network Security. 39
5. Bonus lectures. 1
6. Audio Version of the Training 1

Practise

Infra LabsPKI Essentials — 11 labs 🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab in any 12 months
- Deploy a Private Certificate AuthorityLevel: GuidedDuration: 1 h 15 min
- Configure Custom Certificate Templates and Deployment OptionsLevel: GuidedDuration: 30 min
- Manually Request a PKI CertificateLevel: GuidedDuration: 1 h 15 min
- Can You Deploy a Certificate Authority and Issue Certificates?Level: AdvancedDuration: 1 h 30 min
- Enable DNSSECLevel: GuidedDuration: 30 min
- Use EFS To Encrypt Files on NTFS VolumesLevel: GuidedDuration: 30 min
- Can You Secure DNS Resource Records and Windows NTFS Volume File Objects?Level: AdvancedDuration: 45 min
- Enable SSL/TLS on a WebsiteLevel: GuidedDuration: 30 min
- Enable Client SSL/TLSLevel: GuidedDuration: 30 min
- Can You Secure a Website with an SSL/TLS Certificate?Level: AdvancedDuration: 45 min
- Can You Use PKI to Secure a Network Environment?Level: ExpertDuration: 2 h
LabsIntro to Network Security & Traffic Analysis — 12 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
- Applying Filters to TCPDump and WiresharkDuration: 1 h
- DNS as a Remote ShellDuration: 1 h
- Firewall Setup and ConfigurationDuration: 1 h
- Gap Analysis of Firewall RulesDuration: 2 h
- Implementing Least-Privilege on WindowsDuration: 1 h
- Network Segmentation (FW/DMZ/WAN/LAN)Duration: 1 h
- Setting Up Zones in a FirewallDuration: 1 h
- Snorby Setup and OperationDuration: 1 h
- TCPDumpDuration: 1 h
- Tweaking Firewall Rules for DetectionDuration: 1 h
- Using Snort and Wireshark to Analyze TrafficDuration: 1 h
- WiresharkDuration: 1 h

Step 4 — Domains 5 & 6 — identity and assessment

Access control models, and security assessment and testing: vulnerability scanning and assessment tools.

1 course · 6 sections · 44 lectures · 19 labs

Learn

CourseCISSP Certification: CISSP Domain 5 & 6 Video Boot Camp (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
6 sections · 44 lectures
1. Training Overview 2
2. Introduction 3
3. CISSP Domain 5: Identity and Access Management (IAM). 18
4. CISSP Domain 6: Security Assessment and Testing. 19
5. Bonus lectures. 1
6. Audio Version of the Training 1