James Michael Stewart, CISSP, CEH, CHFI, and Security+ has been working with technology for nearly thirty years. His work focuses on security, certification, and various operating systems. Recently, Michael has been teaching job skill and certification courses, such as CISSP, ethical hacking/penetration testing, computer forensics, and Security+. He is the author of numerous publications, books, and courseware.

Mike Chapple Ph.D., CISSP, is Senior Director for IT Service Delivery at Notre Dame overseeing information security, data governance, IT architecture, project management, strategic planning and product management functions and teaches undergraduate courses on Information Security. Mike spent 4 years in the information security research group at NSA and served as an  intelligence officer in the U.S. Air Force. He is a technical editor for Information Security Magazine and has written several books.

Darril Gibson is the CEO of YCDA, LLC and regularly writes and consults on a wide variety of technical and security topics and holds numerous certifications including MCSE, MCDBA, MCSD, MCITP, ITIL v3, Security+, and CISSP. He has authored or coauthored more than 30 books.

David Seidl CISSP, GPEN, GCIH is the Senior Director for Campus Technology Services at the University of Notre Dame. As the Senior Director for CTS, David is responsible for central platform and operating system support, database administration and services, identity and access management, application services, and email and digital signage. During his 18 year IT career, he has served in a variety of technical and information security roles including leading Notre Dame's information security team as Notre Dame's Director of Information Security. He currently teaches a popular course on networking and security for Notre Dame's Mendoza College of Business.

(ISC)2 CISSP Certified Information Systems Security Professional Official Study Guide, 8th Edition

Introduction xxxiii

Assessment Test xlii

Chapter 1 Security Governance Through Principles and Policies 1

Chapter 2 Personnel Security and Risk Management Concepts 49

Chapter 3 Business Continuity Planning 97

Chapter 4 Laws, Regulations, and Compliance 125

Chapter 5 Protecting Security of Assets 159

Chapter 6 Cryptography and Symmetric Key Algorithms 195

Chapter 7 PKI and Cryptographic Applications 237

Chapter 8 Principles of Security Models, Design, and Capabilities 275

Chapter 9 Security Vulnerabilities, Threats, and Countermeasures 319

Chapter 10 Physical Security Requirements 399

Chapter 11 Secure Network Architecture and Securing Network Components 439

Chapter 12 Secure Communications and Network Attacks 521

Chapter 13 Managing Identity and Authentication 579

Chapter 14 Controlling and Monitoring Access 623

Chapter 15 Security Assessment and Testing 661

Chapter 16 Managing Security Operations 697

Chapter 17 Preventing and Responding to Incidents 737

Chapter 18 Disaster Recovery Planning 801

Chapter 19 Investigations and Ethics 845

Chapter 20 Software Development Security 871

Chapter 21 Malicious Code and Application Attacks 915

Appendix A Answers to Review Questions 949

Appendix B Answers to Written Labs 987

Index 1001

(ISC)2 CISSP Certified Information Systems Security Professional Official Practice Tests, 2nd Edition

Introduction xvii

Chapter 1 Security and Risk Management (Domain 1) 1

Chapter 2 Asset Security (Domain 2) 27

Chapter 3 Security Architecture and Engineering (Domain 3) 51

Chapter 4 Communication and Network Security (Domain 4) 79

Chapter 5 Identity and Access Management (Domain 5) 103

Chapter 6 Security Assessment and Testing (Domain 6) 127

Chapter 7 Security Operations (Domain 7) 151

Chapter 8 Software Development Security (Domain 8) 175

Chapter 9 Practice Test 1 201

Chapter 10 Practice Test 2 231

Chapter 11 Practice Test 3 259

Chapter 12 Practice Test 4 287

Appendix Answers 317

Index 459

The New copy of this book will include any supplemental materials advertised. Please check the title of the book to determine if it should include any access cards, study guides, lab manuals, CDs, etc.

The Used, Rental and eBook copies of this book are not guaranteed to include any supplemental materials. Typically, only the book itself is included. This is true even if the title states it includes any access cards, study guides, lab manuals, CDs, etc.