Jones - CISSP: 3 in 1- Beginners Guide to Learn the Realms of Security and Risk Management from A-Z using CISSP Principles+ Simple and Effective Strategies+ Advanced Methods to Learn the CISSP CBK Reference

International Information Systems Security Certification Consortium - (ISC) is undeniably the worlds largest security organization. It is an international non-profit organization for information security professionals. With more than 140000 certified members, it empowers the professionals who touch every segment in information security. Formed in 1989, it had fulfilled the requirement for vendor-neutral, standardized, globally competent information security certification, networking, collaboration, leadership, and professional development in every aspect.

Certified Information Systems Security Professional (CISSP) is the most premier, internationally recognized, and mature cybersecurity certification. (ISC) launched CISSP in 1994, and to the date, it provides world-class information security education and certification. Along with it comes the prestigious recognition among thousands of top-level security professionals, enterprises and vendors. The certificate provides an extensive boost to your carrier along with other countless benefits. Today (ISC) offers a wide range of exceptional information security programs under different categories including CISSP.

CISSP is the first information security certificate meeting the ISO/IEC Standard 17024 requirements. It is globally recognized, and the exam is available in different languages other than English. As of May 31, 2019, there are 136,480 members. The certification is available in 171 countries.

CISSP is not just another certification. It is a journey through your passion for information security as a student and a professional. It is for the people who are committed and dedicated and live the information security life-style. This does not mean it is boring and tedious. In reality, it is the most challenging, enjoyable journey through cybersecurity. The CISSP certification is the insignia of your outstanding knowledge, skills, and commitment in terms of designing, implementing, developing and maintaining critical and overall security strategy in an organization.

This book was written to provide you with a good head-start by introducing the CISSP curriculum and its first chapter, Security and Risk Management. CISSP certification requires an in-depth understanding of critical components in 8 major domains. Security and risk management is the largest topic taking 15% of them all.

A Comprehensive Beginner's Guide to learn the Realms of Security and Risk Management from A-Z using CISSP principles lines up the CISSP chapter one, Security and Risk Management. This is one of the most important and a theoretical chapter. It introduces why we would need an effective information security program through understanding threats, risks, and business continuity. The fundamentals covered here answers questions such as,

- What a threat and a risk is, why is there a risk?

- What are fundamental security principles?

- What risks are there? Why would we require effective security architecture?

- What are the big words such as governance, compliance, and regulations?

- What are professional ethics?

- What implementations have to be there?

- What is the importance of a security awareness program?

This book walks you through A-Z of risk and risk management while laying out a solid foundation toward the rest of the CISSP topics. It includes complete and comprehensive information and examples on each topic, subtopic, and even the smallest detail that you need not just to pass an examination but to provide you with extensive knowledge, understanding, and utilization. More about using the book is included in the following chapter.

How to Use This Book

As a CISSP student, you have to cover a lot as the subject areas are extensive. This requires your dedication, studying every area in-depth, experience from the field, and commitment. The focus of this book is the areas of security and risk management. This does not mean the content is strictly concentrating on this specific topic. It starts by introducing the field of information security and its principles then walk you through the security and risk management while covering other related areas whenever necessary.

I intend to provide a simple and concise book to help you get started your CISSP journey. I also expect you to master the topic and get organized. At the end of the studies, you will be able to get through the other topics with ease and complete the CISSP examination. The respect and the benefits await.