ISC2 SSCP: Security Monitoring and Incident Response
Security monitoring and incident response The current ISC2 SSCP outline treats monitoring and incident response as connected operational work. Administrators are expected to…
Read articleVENDOR / EXAMTOPICS EDITORIAL
ISC2.
Editorial material about ISC2 and its technologies, assessments and credentials.
PUBLISHED COVERAGECurated by subject
ISC2 SSCP: Network and Communications Security
Protecting networks and communications The current ISC2 SSCP outline treats network security as an operational discipline rather than a list of ports and…
Read articleISC2 SSCP: Access Controls and Identity Operations
Identity and access controls in ISC2 SSCP The current ISC2 SSCP exam outline, effective October 1, 2025, places access control in an operational…
Read articleISC2 CCSP: Cloud Shared Responsibility Beyond the Basics
The cloud shared-responsibility model is often summarized as “the provider secures the cloud and the customer secures what is in the cloud.” That…
Read articleISC2 CCSP: Cloud Infrastructure Security and Segmentation
Cloud infrastructure security depends on making trust boundaries visible in an environment where networks, identities, workloads, and management APIs can all create paths…
Read articleISC2 CCSP: Cloud Incident Response and Forensics
Cloud incident response combines familiar security-response disciplines with evidence sources and containment actions that exist only because the environment is programmable. Investigators may…
Read articleISC2 CCSP: Cloud Identity Federation and Access
Cloud identity federation lets one security domain rely on another domain to authenticate a user or workload without creating a separate long-lived credential…
Read articleISC2 CCSP: Cloud Data Security and Encryption Architecture
Cloud data security requires understanding where data exists, how it moves, who can access it, which provider services process it, and how protection…
Read articleISC2 CCSP: Cloud Compliance, Privacy, and Legal Risk
Cloud security decisions are shaped not only by technology but also by contracts, privacy law, jurisdiction, audit rights, evidence requirements, outsourcing, regulatory obligations,…
Read articleISC2 CCSP: Cloud Application Security and DevSecOps
Cloud application security combines secure software engineering with cloud-specific identity, API, platform, supply-chain, and deployment controls. DevSecOps integrates those controls into the engineering…
Read articleISC2 CISSP: Threat Modeling for Enterprise Applications
Threat modeling is a structured method for identifying how an application can be attacked before those paths become production incidents. Enterprise applications rarely…
Read articleISC2 CISSP: Third-Party Risk and Supply Chain Security
Modern enterprises depend on vendors, cloud providers, SaaS platforms, managed service providers, open-source projects, contractors, hardware suppliers, and software distribution systems. Third-party risk…
Read articleISC2 CISSP: Security Operations and Incident Management
Security operations turns controls, telemetry, people, and response processes into continuous protection. Operations teams monitor identity, endpoints, cloud, networks, applications, vulnerabilities, configuration, and…
Read articleISC2 CISSP: Security Models and Trusted Computing Concepts
Security models give architects formal ways to reason about information flow, integrity, authorization, and trusted system behavior. They are abstractions, not complete enterprise…
Read articleISC2 CISSP: Security Governance
Security governance defines how an organization directs, controls, and evaluates information security so technical work supports business strategy and risk tolerance. Governance determines…
Read article