CISSP Study Plan - “I am the type of person who does what they say they will do.”

 🛡️ CISSP Study Plan

“I am the type of person who does what they say they will do.”

Theme: Study like it’s a college course.
Goal: Pass the CISSP in ~12–16 weeks with 1–2 hrs/day, practice exams on Saturdays.

Start Date: ____________  

Target Exam Date: ____________  

Daily Time Budget: 1–2 hrs/day  

Weekly Focus: Read → Note → Quiz → Reflect → Revisit  

Key Resources: ISC2 Book (9th ed.), Cybrary Kelly H., Destination CISSP, 11th Hour  

🔁 Weekly Structure Overview

Day

Focus

Mon–Fri

1–2 hrs/day: “Class + Homework” (Structured reading/video + notes)

Saturday

Practice exam (2–4 hrs) + review mistakes + rest day (optional)

Sunday

Weekly checkpoint: 10–20 quiz questions + plan review (15–30 min)

✍️ Notes

  • Use your audio version during walks or downtime for reinforcement.

  • Use “Destination CISSP” when a domain isn’t clicking—it's great for analogies.

  • Keep 11th Hour for review weeks only (it’s a cram tool, not a teaching guide).

  • Kelly’s Cybrary course is gold—use it at the beginning of each domain for grounding.

📅 12-Week Roadmap

Week

Domains Covered (Official CBK order)

Key Resource Focus

1

1. Security & Risk Management

Kelly’s Cybrary + Chapple Ch. 1–3

2

Continue Domain 1

Finish Chapple Ch. 4–6 + practice q’s

3

2. Asset Security

Chapple Ch. 7–8 + Cybrary + flashcards

4

3. Security Architecture & Engineering

Chapple Ch. 9–12 + Cybrary

5

4. Communication & Network Security

Chapple Ch. 13–15

6

5. Identity & Access Management

Chapple Ch. 16–17 + Destination CISSP highlights

7

6. Security Assessment & Testing

Chapple Ch. 18–19 + Cybrary

8

7. Security Operations

Chapple Ch. 20–22

9

8. Software Development Security

Chapple Ch. 23 + Syngress 11th Hour overview

10

Review Week: Flashcards + Weak Areas

Daily mixed-domain quizzes

11

Practice Exam Week

Full exam Sat, review all mistakes

12

Light review + Final Exam

Re-review weakest domains + 2nd full test Sat

✅ Daily Checklist (Print Me)

  • 📘 Read/watch today’s material (30–60 min)

  • 📝 Summarize key ideas in your notebook or flashcards (15–30 min)

  • 💡 Apply concepts via practice questions (15–30 min)

  • 🙏 Re-affirm: “I am the type of person who does what they say they will do.”

🧠 Saturday Deep-Dive (Optional/Recommended)

  • ⏱️ Take 1 full or half-length practice exam (from the Wiley book or online)

  • 📊 Review every mistake: What, Why, How to fix

  • 🔁 Review flashcards / weak topics

  • 🧘 Optional: Take the rest of the day off to reset and recharge

🧭 Sunday Planning Session

  • Take a 10–20 question quiz (random domain)

  • Identify weak spots from the week

  • Plan next week's content: chapters, videos, key terms

  • Reflect: “Where did I win this week? Where can I improve?”

Comments

Post a Comment

Popular posts from this blog

🧭 CISSP Study Note: Guidelines

🧭 CISSP Study Note: Guidelines 🔍 Definition Guidelines are suggested practices, recommendations, or expectations that help individuals or teams perform tasks effectively and consistently to achieve organizational goals, standards, and strategic objectives . Unlike policies or standards, guidelines are not mandatory —they offer flexibility while still encouraging best practices. 🧠 Why It Matters in Cybersecurity In a security framework, not every situation can be addressed with a rigid rule . Guidelines fill that gap by offering direction without strict enforcement , helping professionals: Make informed decisions Handle exceptions responsibly Align behavior with organizational goals Maintain consistency across teams They also support user education, secure configurations, and best practices adoption without limiting operational flexibility. 📋 Guidelines vs. Policies vs. Standards Term Binding? Purpose Policy ✅ Mandatory Defines what must be...
Read more

💸 CISSP Study Note: Risk Transference

 💸 CISSP Study Note: Risk Transference 🔍 Definition Risk Transference is the process of shifting the financial or operational impact of a risk to a third party , typically through contracts, insurance, or outsourcing agreements . While the risk itself doesn’t disappear, its burden is transferred , meaning someone else becomes responsible for managing or absorbing the consequences . 🧠 Why It Matters in Cybersecurity Not all risks are feasible to mitigate or avoid directly—especially high-cost, low-probability events . Risk transference allows organizations to: Focus on their core competencies Offload specialized or high-risk tasks Limit financial exposure Improve recovery options without investing heavily in in-house controls 📌 Transference does NOT eliminate the risk—it shifts the responsibility or financial impact. 🧾 Common Methods of Risk Transference Method Description Cybersecurity Insurance Transfers financial losses from cyberattack...
Read more

📏 CISSP Study Note: Standards

📏 CISSP Study Note: Standards 🔍 Definition Standards are specific, mandatory rules or technical specifications that define how policies must be implemented and how performance or behavior must conform to meet organizational or regulatory expectations. They are non-negotiable , measurable, and enforceable, often serving as the baseline for procedures and audits . While policies tell you what to do, standards tell you exactly how it must be done. 🧠 Why It Matters in Cybersecurity Standards are critical for ensuring consistency , reliability , and compliance across systems, teams, and departments. They help: Reduce ambiguity in control implementation Align practices with compliance frameworks Support repeatable, auditable processes Simplify training, onboarding, and cross-team coordination 🧩 Standards in the Policy Hierarchy Level Purpose Policy High-level directive—“What must be done” Standard ✅ Mandatory specification—“How it must ...
Read more