Skip to content
kagi
Professional Certifications

CISSP preparation

Structured preparation across the eight CISSP domains, with an emphasis on reasoning like a security manager rather than memorising facts.

Who it's for

Experienced security and IT professionals preparing for the CISSP examination.

Learning outcomes

  • Navigate the eight domains with a clear mental model of how they connect
  • Approach scenario questions from a risk and governance perspective
  • Build a personal study plan towards your chosen exam date

Curriculum

What the course covers.

  1. 01

    Security & risk management

    Governance, compliance, professional ethics and the risk concepts every other domain builds on.

  2. 02

    Asset security & architecture

    Information classification, handling, and the engineering principles behind secure design.

  3. 03

    Communication & network security

    Secure network architecture, transmission methods and the reasoning behind common controls.

  4. 04

    Identity & access management

    Physical and logical access control, identity lifecycle and authentication decisions.

  5. 05

    Security assessment & testing

    Audit strategies, testing approaches and how to read their results critically.

  6. 06

    Operations, development & resilience

    Secure operations, software development security, business continuity and exam technique.

Delivery options

Choose how you'd like to learn.

These are the formats we propose for this course. Dates agreed on enquiry; availability and duration are always confirmed on enquiry.

Completing this preparation course is not a certification. The examination is booked and administered separately by the certifying body, and no exam result is guaranteed.

Sample lesson — design concept

Thinking like a security manager: risk before controls

A taste of how a Kagi lesson reads and checks understanding. This is a demonstration for the website concept, not a complete course module.

A common mistake in CISSP preparation — and in security work generally — is to reach for a control before understanding the risk it addresses. The exam rewards the opposite habit: read the scenario, identify what the organisation is actually trying to protect, and only then weigh the options.

Consider a company worried about sensitive files leaving the building. A technical mind lists tools: encryption, data-loss prevention, USB blocking. A security manager first asks sharper questions. Which files matter most? Who legitimately needs them? What would disclosure actually cost the business? The answers often change the response entirely — sometimes the proportionate control is a clear handling policy and staff awareness, not another appliance.

This is why the CISSP exam so often presents several technically correct answers. Your task is to choose the one that best serves the organisation's risk position, its people and its budget — in that order of thinking.

Knowledge check

An organisation discovers staff emailing work files to personal accounts. What should a security manager do first?

Demo interaction: your answer is checked in your browser only and is not recorded.

Availability, dates and duration for CISSP preparation are confirmed on enquiry. Enquire about this course.

More in Professional Certifications

Interested in CISSP?

Tell us about your background and goals, and which format suits you. We'll reply personally.

Existing contact: info@symmaxa.com

Design concept