(ISC)2 Certification Topics

Business Continuity

4 exams

Incident response

3 exams

Authentication

3 exams

Access Control

3 exams

vulnerability assessment

2 exams

Symmetric encryption

2 exams

security assessment

2 exams

physical security

2 exams

Network security

2 exams

Lessons learned

2 exams

Authentication Factors

2 exams

NIST SP 800-37

2 exams

Risk Management Framework (RMF)

2 exams

Continuous monitoring

2 exams

Integrity

2 exams

Non-repudiation

2 exams

Disaster Recovery

2 exams

Operational Resilience

2 exams

Availability

2 exams

Security models

2 exams

Distributed Systems

2 exams

Quantitative Risk Analysis

2 exams

Risk Management

2 exams

Risk Response

2 exams

Risk Identification

2 exams

Risk Mitigation

2 exams

Information Assurance

2 exams

Security Frameworks

2 exams

Certification and Accreditation

2 exams

discovery phase

1 exam

OS fingerprinting

1 exam

scanning errors

1 exam

Accountability

1 exam

Backup media

1 exam

Data access

1 exam

Information lifecycle

1 exam

VLAN

1 exam

network segmentation

1 exam

Layer 3 routing

1 exam

Operating systems

1 exam

System architecture

1 exam

Hardware Abstraction Layer (HAL)

1 exam

DES

1 exam

Key length

1 exam

Cryptographic weaknesses

1 exam

Rootkit

1 exam

Malware remediation

1 exam

System reinstallation

1 exam

federated identity

1 exam

trust relationships

1 exam

identity providers

1 exam

single sign-on (SSO)

1 exam

penetration testing

1 exam

due diligence

1 exam

M&A security

1 exam

digital forensics

1 exam

order of volatility

1 exam

evidence collection

1 exam

RFID

1 exam

asset tracking

1 exam

asset management

1 exam

Cloud deployment models

1 exam

Private cloud

1 exam

Cloud security architecture

1 exam

Data security

1 exam

Cloud contracts

1 exam

Vendor management

1 exam

Data processing

1 exam

Subcontractor agreements

1 exam

Data Archiving

1 exam

Data Recovery

1 exam

Long-term storage

1 exam

Data lifecycle management

1 exam

DLP

1 exam

Data Loss Prevention

1 exam

Data Security Controls

1 exam

Tokenization

1 exam

DRM

1 exam

SIEM

1 exam

Security Controls Integration

1 exam

BCDR

1 exam

Critical Assets

1 exam

Contingency Planning

1 exam

Asset Identification

1 exam

Cryptographic keys

1 exam

Key management

1 exam

Data security principles

1 exam

Information protection

1 exam

Bastion host

1 exam

System hardening

1 exam

Perimeter security

1 exam

Cloud Service Models

1 exam

IaaS

1 exam

Shared Responsibility Model

1 exam

Operating System Administration

1 exam

Cloud Resource Allocation

1 exam

Resource Prioritization

1 exam

Resource Sharing

1 exam

Cloud Resource Management

1 exam

data classification

1 exam

sensitive data

1 exam

PII

1 exam

information security policies

1 exam

Security logging

1 exam

Event logging

1 exam

Forensic data

1 exam

Stream ciphers

1 exam

Hardware implementation

1 exam

Block ciphers

1 exam

Cryptographic primitives

1 exam

Disaster Recovery Plan

1 exam

Alternate Sites

1 exam

Geographic Redundancy

1 exam

Bell-LaPadula model

1 exam

Star-property

1 exam

Confidentiality

1 exam

Access Control Models

1 exam

Post-mortem review

1 exam

Incident closure

1 exam

Biometrics

1 exam

Retinal Scan

1 exam

Access Control Technology

1 exam

Physical Characteristics

1 exam

Intrusion Detection Systems

1 exam

NIDS

1 exam

Network Monitoring

1 exam

Security Architecture

1 exam

Kerberos

1 exam

Replay attacks

1 exam

Timestamps

1 exam

Authentication protocols

1 exam

RMF Tiers

1 exam

Physical Controls

1 exam

Security Controls

1 exam

Environmental Security

1 exam

Information Security Roles

1 exam

Agency Roles

1 exam

CISO

1 exam

SAISO

1 exam

Security Assessment Report

1 exam

NIST RMF

1 exam

Security Control Assessment

1 exam

Documentation

1 exam

Event-driven authorization

1 exam

System change management

1 exam

Authorization triggers

1 exam

Assessment Plan

1 exam

CIA Triad

1 exam

Information Security Principles

1 exam

Risk impact levels

1 exam

CIA loss

1 exam

Adverse effects

1 exam

Organizational impact

1 exam

RMF Roles

1 exam

Risk Executive

1 exam

Risk Management Strategy

1 exam

Authorization Decisions

1 exam

Security Control Overlays

1 exam

Control Tailoring

1 exam

Security Control Baselines

1 exam

Buffer overflow

1 exam

Security countermeasures

1 exam

IIS security

1 exam

DIACAP

1 exam

Certification & Accreditation

1 exam

Information Assurance Controls

1 exam

Validation

1 exam

Cold Site

1 exam

Budgetary Constraints

1 exam

DoD 8500.2

1 exam

Mission Assurance Categories

1 exam

Software architecture styles

1 exam

Pipes and filters

1 exam

Architectural patterns

1 exam

Data transformation

1 exam

CSRF

1 exam

Web application security

1 exam

Vulnerabilities

1 exam

Attack types

1 exam

DITSCAP

1 exam

System Accreditation

1 exam

Post-Accreditation Phase

1 exam

Lifecycle Management

1 exam

Anonymous Authentication

1 exam

Web Security Concepts

1 exam

Uptime

1 exam

Hot Site

1 exam

Clark-Wilson model

1 exam

Integrity models

1 exam

Well-formed transactions

1 exam

Power Management

1 exam

Post-incident Review

1 exam

Security Documentation

1 exam

Rule-Based Access Control (RuBAC)

1 exam

Dynamic Access Control

1 exam

Security Training

1 exam

Security Awareness

1 exam

Human Factors

1 exam

Recovery Sites

1 exam

Load Balancing

1 exam

High Availability

1 exam

Multi-region Deployment

1 exam

Business Continuity Plan (BCP)

1 exam

Disaster Recovery (DR)

1 exam

Organizational Resilience

1 exam

Incident Management

1 exam

Proxy servers

1 exam

Network anonymity

1 exam

Network security tools

1 exam

Networking fundamentals

1 exam

Privileged Access

1 exam

User Roles

1 exam

Least Privilege

1 exam

Security Principles

1 exam

Information Security Governance

1 exam

Risk Management Inputs

1 exam

Project Management

1 exam

Functional Organization

1 exam

Certification

1 exam

Accreditation

1 exam

RMF

1 exam

Risk Response Planning

1 exam

Negative Risks

1 exam

Threats

1 exam

Risk Avoidance

1 exam

Risk Response Strategies

1 exam

Project Scope Management

1 exam

Mitigation

1 exam

Project Risk

1 exam

Risk Monitoring

1 exam

Multi-factor authentication

1 exam

Smart cards

1 exam

Passwords

1 exam

Watchlist

1 exam

Low Probability/Impact Risks

1 exam

Security Certification

1 exam

RMF Documentation

1 exam

POAM

1 exam

Accreditation Package

1 exam

CIO Responsibilities

1 exam

IT Governance

1 exam

Strategic IT Planning

1 exam

Man-in-the-Middle (MITM)

1 exam

PHI data leak

1 exam

Anonymization

1 exam

Notice of Privacy Practices

1 exam

HIPAA compliance

1 exam

Patient rights

1 exam

Privacy regulations

1 exam

Patient Privacy

1 exam

PHI Disclosure

1 exam

Consent for Disclosure

1 exam

Healthcare Information Sharing

1 exam

HIPAA Administrative Simplification

1 exam

Provider-payer transactions

1 exam

Healthcare compliance

1 exam

HIPAA incident response

1 exam

breach notification

1 exam

unauthorized access

1 exam

security incidents

1 exam

NHSC

1 exam

Physician recruitment

1 exam

Healthcare workforce

1 exam

Shortage areas

1 exam

42 CFR Part 2

1 exam

Patient confidentiality

1 exam

Substance abuse records

1 exam

Medical emergency exceptions

1 exam

HIPAA scope

1 exam

Covered entities

1 exam

HIPAA applicability

1 exam

Workforce

1 exam

Resource allocation

1 exam

Healthcare outcomes

1 exam

Healthcare economics

1 exam

Operations management

1 exam

Healthcare delivery levels

1 exam

Secondary care

1 exam

Specialty referral

1 exam

Emergency care

1 exam

Discretionary Access Control

1 exam

Access Control Lists

1 exam

Authorization

1 exam

SSL/TLS

1 exam

Asymmetric encryption

1 exam

Hybrid encryption

1 exam

Ring topology

1 exam

Network topologies

1 exam

Physical topology

1 exam

DNS resolution

1 exam

hostname mapping

1 exam

network troubleshooting

1 exam

TCP/IP

1 exam

OSI Model

1 exam

Application Layer

1 exam

Digital signatures

1 exam

SDLC phases

1 exam

Programming phase

1 exam

System documentation

1 exam

Implementation

1 exam

Bus Topology

1 exam

Cable Termination

1 exam

Network Faults

1 exam

Coaxial Cable

1 exam

Annualized Loss Expectancy

1 exam

Asset Valuation

1 exam

Risk Metrics

1 exam

Brute Force Attack

1 exam

Spoofing

1 exam

Access Control Attacks

1 exam

Credential Attacks

1 exam

Message Authentication Code

1 exam

Cryptographic hashing

1 exam

MITM resistance

1 exam

Data integrity

1 exam

Technical Management Plan

1 exam

Systems Engineering

1 exam

Project Planning

1 exam

SDLC

1 exam

Net-Centric Data Strategy

1 exam

Data Sharing

1 exam

Information Management

1 exam

Data Governance

1 exam

Risk Ownership

1 exam

Project Roles

1 exam

Certification and Accreditation (C&A)

1 exam

NIACAP

1 exam

IS program manager

1 exam

System life cycle

1 exam

Security requirements

1 exam

DAA

1 exam

Designated Approving Authority

1 exam

Risk Acceptance

1 exam

System Authorization

1 exam

Quality Management

1 exam

ISO 9001

1 exam

Executive Leadership

1 exam

Business Integration

1 exam

CNSS Issuances

1 exam

Policy Implementation

1 exam

Government Security Standards

1 exam

Security Governance

1 exam

Security Categorization

1 exam

Certification & Accreditation (C&A)

1 exam

Netcentric Architecture

1 exam

Network Design Principles

1 exam

Secure Interconnection

1 exam

Evidence types

1 exam

Circumstantial evidence

1 exam

Incident investigation

1 exam

Risk Management Goals

1 exam

Risk Assessment

1 exam

Economic Risk Analysis

1 exam

Disaster Recovery Plan (DRP)

1 exam

Change Management

1 exam

System Development Life Cycle (SDLC)

1 exam

Maintenance

1 exam

Quality Control

1 exam

SSH

1 exam

Encryption

1 exam

Negotiation strategy

1 exam

BATNA

1 exam

Conflict resolution

1 exam

Decision making

1 exam

Equal Credit Opportunity Act

1 exam

Credit Discrimination

1 exam

Regulatory Compliance

1 exam

Non-Discrimination Laws

1 exam

Orange Book

1 exam

TCSEC

1 exam

Security Evaluation

1 exam

Trusted Systems

1 exam

IDS/IPS

1 exam

Signature-based detection

1 exam

Network security monitoring

1 exam

Threat detection

1 exam