CISSP EXAM CRAM - DOMAIN 1 Security and Risk Management (RETIRED! NEW VERSION IN DESCRIPTION)

[@vasudhakota972]

6:33 CIA Triad 7:48 ISC2 Code of Ethics 8:26 Four levels of Security Policy Development 9:30 Tidbit for the exam 12:44 Response to risk - Risk Acceptance, Risk Mitigation(Reduction), Risk Assignment(Transference), Risk Avoidance, Risk Deterrence, Risk Rejection/Ignoring 15:52 NIST 800-37 Rev 2 : Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy RMFs for use in the real world - OCTAVE, FAIR, TARA 16:54 7 Steps of NIST 800-37 19:59 Exam Tidbit 21:17 Types of Risks - Residual, Inherent & Total 22:54 Exam tidbits 24:18 Risk analysis - 27:55 Qualitative Risk Analysis 29:07 Delphi Technique 29:20 Considerations in Risk Analysis 30:00 Threat Agents 30:20 Terms in Risk Analysis 35:42 Safeguard Evaluation 37:16 Controls Gap 38:40 Methodologies in Supply Chain Evaluation 39:47 Threat Modeling 40:30 Approaches of Threat Modeling 40:56 Exam Tidbits - DREAD Methodology 43:09 Diagramming Potential Attacks in Threat Modeling 45:10 Reduction Analysis 46:58 Prioritization & Response 47:12 Security Controls 47:54 Categories 48:45 Types 53:15 Legal & Regulatory Issues 53:21 Types 54:26 Laws 55:10 IP & Licensing 55:50 Encryption & Privacy 56:50 Other US Privacy Laws 58:32 Business Continuity

[@staceygosman4469]

Thank you for the videos. It took me a few months to study for the cissp exam. However, I watched your videos the last few weeks and spend the day before rewatching them to cram for the exam. I passed it on the first try!!! Thank you so much

[@InsideCloudAndSecurity]

Stacey, it's comments like this that make my day! Glad I could help. Congrats on passing the exam! 🎉🏆👍

[@danielschilling6779]

I passed today and my primary sources were these videos and the Sybex Study Guide. These videos are quick, concise, and give the general concepts of the CISSP general body of knowledge. Thank you for the presentations and little shortcuts and techniques from the side videos!

[@InsideCloudAndSecurity]

Glad it was helpful!

[@sadiqmajid6696]

A video dedicated to all CISSP formulas would be just awesome. Thanks

[@InsideCloudAndSecurity]

I made a video dedicated to the quantitative risk analysis formulas named "just the formulas". Here it is - kzbin.info/www/bejne/qqWyfH2PhMqXhNE

[@elsero100]

5

[@freedomproducer]

Passed CISSP today, crammed through these 8 videos 2 days before. Was a great refresher!

[@InsideCloudAndSecurity]

AWESOME! Congrats Tony! 👍🎉🏆

[@magician234]

Began my studies on CISSP, received the book, and watched this entire video. Will be watching every video around CISSP exam-related training.Thank you very much for the content.

[@InsideCloudAndSecurity]

My pleasure! Ping me if questions as you prepare. 😉

[@jacobmills1982]

I just passed CISSP today after 4 weeks of study. I’ve been in the industry for 20 years which certainly helps. I used the official study guide to reference and went through practice tests from ‘cccure’ reading explanations thoroughly. When I was driving or working out, I was listening to your videos. Thanks for the help!

[@InsideCloudAndSecurity]

My pleasure, Jacob. Congrats on your result! 🏆

[@Sequel7]

20 years helps I have 0 years of experience lol but I just passed the CompTIA security +

[@jacobmills1982]

@@Sequel7 You’d be surprised how many “experienced” people can’t pass the sec+ exam. Getting that out of the way early is good.

[@Sequel7]

@@jacobmills1982 oh wow. Thanks. It took me about 4 months of studying, darril gibsons book really helped.

[@muhammadadnanbukhari3002]

I passed CISSP on 4th March 2022. Last time I was in great frustration. Exam cram helped me. Thank you so much for creating such an amazing mind map video.

[@InsideCloudAndSecurity]

Glad this was helpful! Congratulations! 🏆🎉

[@mohammadparacha4209]

Congratulations 🎉. How many hours does it take to prepare from zero to hero, on average

[@SH-os1ck]

Sorry, I know it's not much. But I have to thank you for these amazing videos!

[@InsideCloudAndSecurity]

I’m so happy the exam cram was helpful. And THANK YOU for supporting my work. Seriously, very kind of you. 🙏👍

[@jlundie7]

Great videos and just what I need. I have taken the exam twice and twice I failed. I was so heart broken but will try again.

[@InsideCloudAndSecurity]

Sounds like you need my "CISSP Mindset" video. You can find it on the 16-video series playlist! kzbin.info/aero/PL7XJSuT7Dq_XPK_qmYMqfiBjbtHJRWigD

[@painkillerO8]

Today is my first day learning. I like the way you are teaching.

[@InsideCloudAndSecurity]

Thanks. Reach out if any questions. Good luck! 🍀🤞

[@PaulEllisBIGDATA]

Who in the hell gave this a thumbs down?? No reason for thumbs down.

[@InsideCloudAndSecurity]

Thanks Paul! Good luck on the exam! 👍

[@arashvermahmood7961]

really appreciate you sharing the important concise content and saving us time.

[@InsideCloudAndSecurity]

Did you see my consolidated full course and CISSP 2024 Addendum videos?

[@arashvermahmood7961]

yes, greatly helpful. thanks.

[@Chain-tc8pb]

Thank you! I passed recently and your material was a great help. I only studied a month.

[@InsideCloudAndSecurity]

Glad it helped! CONGRATULATIONS! 🏆🎉🌟

[@netsnower]

Thanks for this great CISSP Domain 1 cram video, it really helps to reinforce the topics and concepts learned from the ISC2 official study guide.

[@InsideCloudAndSecurity]

I hear that! Hope the whole series is helpful. Best of luck on the exam!

[@WathiqHAtrah]

Can you please make video specifically for the formulas included in the CISSP exam. Ty for your time and effort your videos been very helpful.

[@WathiqHAtrah]

I see you have a video already. Ty Sir

[@InsideCloudAndSecurity]

Already did. See Master CISSP Risk Analysis Formulas (CISSP Exam Cram) kzbin.info/www/bejne/qqWyfH2PhMqXhNE

[@eddiekane6838]

Great content! A video with just formulas would be amazing.

[@InsideCloudAndSecurity]

I will make it so!

[@eddiekane6838]

@@InsideCloudAndSecurity Greatly Appreciated!

[@InsideCloudAndSecurity]

Video dedicated to formulas coming tomorrow. Just dropped a video on CISSP memorization tips you don't want to miss! kzbin.info/www/bejne/gnjUi5Wfntmcetk

[@InsideCloudAndSecurity]

Here is your video dedicated to CISSP risk analysis formulas in action! kzbin.info/www/bejne/qqWyfH2PhMqXhNE

[@carnifex7176]

Great stuff! Thank you for this. Very useful.

[@InsideCloudAndSecurity]

Glad you like it! 😉

[@telugugarden1957]

Thanks for sharing & explaining content which no other tutors touched ..... really useful....please do video on formulas.... once again thanks a lot and looking forward more videos

[@InsideCloudAndSecurity]

Video on formulas already available. Find it here kzbin.info/www/bejne/qqWyfH2PhMqXhNE 👍

[@pleasedial9112]

AWESOME content...cant wait to test

[@InsideCloudAndSecurity]

Good luck with the exam! 👍🎉

[@HN-ATX]

I am still watching your video. The way you present is great. Will you release a new series for the new exam in 2021? Meanwhile, I intent to watch all existing ones. Thanks.

[@InsideCloudAndSecurity]

Theses are still good for 2021, which is an incremental update. You need the CISSP 2021 refresh video + the other 16 on my CISSP Exam Cream playlist - kzbin.info/aero/PL7XJSuT7Dq_XPK_qmYMqfiBjbtHJRWigD

[@wolkenacht4331]

Wow. I‘m impressed by all your excellent content. I‘m currently studying for CISA but I think your videos will help me a lot as well! I‘ll use them as a supplement :)

[@InsideCloudAndSecurity]

Thanks! I recently started preparing for CISA also! 👍

[@wolkenacht4331]

@@InsideCloudAndSecurity awesome!

[@capt119020]

Great content, great flow to the material. With the exam changing in May, I am making a push to get this done before then.

[@InsideCloudAndSecurity]

The changes in May are relatively minor, but I agree. Getting it done before May is a good plan so you don't have to worry about covering the gap.

[@capt119020]

@@InsideCloudAndSecurity I noticed they changed the triad?

[@alimotiwala570]

@@InsideCloudAndSecurity please advise on domain 3 video

[@Skylar636]

Thank you so much for these videos!!! Simplistic but to the point! I have a few questions though. 1. Quantitative Analysis - I understand the formulas, however I am struggling with doing the math manually (I won't have a calculator in the testing center and I am horrible with Math). The example you gave 100,000 x .3 (30%) = 30,000. How do I calculate 100,000 x .3 manually to get the SLE (AV x EF = SLE) ? You're help is greatly appreciated.

[@InsideCloudAndSecurity]

Sheena, I think you should watch my "just the formulas" video, which walks you through the math. Find it at kzbin.info/www/bejne/qqWyfH2PhMqXhNE

[@Skylar636]

@@InsideCloudAndSecurity Ok, I will thank you so much for responding! You're videos rock!

[@InsideCloudAndSecurity]

@@Skylar636 glad you like. Reach out anytime with questions. Good luck! 🤞

[@jagannathramanan]

Thank you so much sir. Yes the video about the risk formulas Calc. Would be great sir.. again couldn't thank you enough.. great material

[@InsideCloudAndSecurity]

Glad to hear it. Reach out if any questions along the way!

[@wukonggokong7362]

Great Content, are you going to make the PDF available for Domain 1 and 2, like you did for the others?

[@InsideCloudAndSecurity]

Yes indeed, within the next few hours. Will drop a comment once they're uploaded.

[@InsideCloudAndSecurity]

PDFs for each domain are now available in each video's description.

[@davidaw104]

Hi. Need advise. Was told you need to have CCNA and CompTIA to understand the intricacy of cyber security?

[@InsideCloudAndSecurity]

No, neither are essential to gaining an understanding of cyber security.

[@redsoxwinagain2007]

I have 17 IT and security carts including the CCSP but the CISSP is my Elenor...

[@InsideCloudAndSecurity]

I have 18 videos on the series to help you get there. Good luck and ping of questions as you prepare! kzbin.info/aero/PL7XJSuT7Dq_XPK_qmYMqfiBjbtHJRWigD

[@mike94r]

Great videos. Excellent presentation. Perfect study companion to the ISC book.

[@InsideCloudAndSecurity]

Thank you Mike! Good luck on the exam! 😉

[@pabloefernandez8248]

Hello, thank you for the great content. I was wondering how important are Threat and Modeling, i have found poor information on the official Study guide. Could you suggest some more resources? Thank you.

[@InsideCloudAndSecurity]

Thanks Pablo! This is an exam for security leaders, so you need to know the three approaches frameworks take to theat modeling, and be familiar with the common threat models at a high level. My CISSP Processes and Frameworks video has a targeted 5 minutes that gives you this info starting HERE - kzbin.info/www/bejne/o33Yfad_qKmdgZo

[@pabloefernandez8248]

@@InsideCloudAndSecurity Thank you very much! I will check the video.

[@InsideCloudAndSecurity]

Reach out anytime you have a question as you prepare. Good luck! 👍

[@rodrigoms75]

What would be the certification path for someone with CompTIA+ to reach CISSP ?!?

[@InsideCloudAndSecurity]

CompTIA flow is typically A+, Net+, then Sec+. CISSP is an exam for security leaders, and requires five years security experience. Definitely one you work your way up to.

[@cisspknights9972]

Nice Explanation

[@InsideCloudAndSecurity]

Thanks and welcome! My CISSP 2022 update, all 8 domains, is now available at kzbin.info/www/bejne/lZ_ci5uPo6iBgqM

[@devakumarmahadevan7508]

Thanks a lot for this Amazing content and time that you spent in preparing this. We are looking forward for the video on the other modules and an exclusive video on important terms and formulas.

[@InsideCloudAndSecurity]

Video dedicated to formulas coming tomorrow. Just dropped a video on CISSP memorization tips you don't want to miss! kzbin.info/www/bejne/gnjUi5Wfntmcetk

[@InsideCloudAndSecurity]

Here is your video dedicated to CISSP risk analysis formulas in action! kzbin.info/www/bejne/qqWyfH2PhMqXhNE

[@devakumarmahadevan7508]

@@InsideCloudAndSecurity thanks a lot for your amazing work.

[@KoolMB]

the cissp practice quiz on your website has XSS scripts in it and I am unable to complete the quiz as is. Please look into this. Thanks

[@InsideCloudAndSecurity]

If you can ping me in a PM on LinkedIn with a little more detail on what you see, I'll send it to the developer and see if he can address your concern.

[@painkillerO8]

I have the 8th edition. Do I need to buy the 9th edition?

[@InsideCloudAndSecurity]

If you watch a couple of "what's new in 2021" videos (like mine), you might be okay. 2021 updates were incremental. If budget is limited, you can make it work.

[@eugenechoong1270]

Will this videos for each domain cover all concepts to pass the cissp ?

[@InsideCloudAndSecurity]

Eugene, it's intended as part of my exam prep strategy, which includes the practice exams and flashcards that come with the Official CISSP Study Guide, as detail in this video - kzbin.info/www/bejne/boXHfWRsrr6BmpI. You will find I focus on covering a lot of important information quickly, wasting no time or words.

[@eugenechoong1270]

@@InsideCloudAndSecurity so is that a yes or no ? I’m looking at the cissp study guide it’s like 1.2k pages it’s just too many pages

[@InsideCloudAndSecurity]

@@eugenechoong1270 My strategy video suggests you use my videos along with practice exam questions and flash cards that come with the study guide. Then use the official study guide as a spot reference based on areas you struggle in the practice questions. But do take 20 min and watch how I did it and that will help answer this question.

[@eugenechoong1270]

Thanks ! You’ve got a. Very nice voice!

[@user-ry6dh6fw4v]

Thank you. Really good video.

[@InsideCloudAndSecurity]

Glad it was helpful!

[@vak21]

wow... thanks a lot for sharing and creating such valuable information ! Great video, I follow your videos since AZ500 :)

[@InsideCloudAndSecurity]

My pleasure. I hope it's helpful!

[@jamesculhan8312]

Last year, with my paid online course by (ISC)2, I received "CISSP Student Guide 2018.pdf". Is that same as book you recommend "Official CISSP Study Guide" linked to Amazon ?

[@InsideCloudAndSecurity]

Yes I think so, but you will want to check with them to confirm. The 2021 version of the book isn't out until the end of May I believe. So if you own the 2018 version already, that's best case as of today. However the bundle that I mentioned does include access to practice questions and flashcards so you'd have to check if you have that access with what you received in your course.

[@jamesculhan8312]

@@InsideCloudAndSecurity Thanks for your quick reply. My concern also is the difference in title. Your recc is "Official CISSP Study Guide"; my .pdf is "CISSP Student Guide 2018". Do U know if these have same or different content?

[@InsideCloudAndSecurity]

Can't be sure, but key question that will answer the question: Did you get access to 1,300+practice questions and 700 flash cards as come with the official bundle I recommend on Amazon?

[@color.8467]

what do i pass cissp or security +?

[@InsideCloudAndSecurity]

I have a recommended exam prep strategy for Security+ HERE (kzbin.info/www/bejne/b3nHaYSAor-Ei8U) and CISSP HERE (kzbin.info/www/bejne/lZ_ci5uPo6iBgqM)

[@ErickAlpizar]

What edition of the CISSP CBK are these videos based on? I'm reading the 9th Edition and I see a few items here and there are not mentioned in this edition of the book (like Loss Potential / Delayed Loss)... Is this something to be concerned about for the test?

[@InsideCloudAndSecurity]

This was based on the 8th edition (recorded early 2021), with any gaps covered in my "What's new in CISSP in 2021?" video at kzbin.info/www/bejne/fZKTcnqubZicpdE. So, nothing to be concerned about. You will find in my 2021 video that the updates are incremental. You'll also find many recent notes from candidates who have used these videos successfully to clear the exam up to the present day. Reach out any time if questions as you prepare.

[@ErickAlpizar]

@@InsideCloudAndSecurity Awesome! Thank you :-)

[@InsideCloudAndSecurity]

Anytime. Ping me if any questions as you progress! 👍

[@hamzabenazouz6641]

Thanks

[@InsideCloudAndSecurity]

Happy to help. Good luck on the exam! 👍🍀

[@CaptDarksoul]

Formula video please

[@InsideCloudAndSecurity]

Already available! 👍 kzbin.info/www/bejne/qqWyfH2PhMqXhNE

[@sickkrakr8405]

im going to crush this exam

[@InsideCloudAndSecurity]

Good luck! Make sure you check out the videos on my CISSP Exam Cram playlist! kzbin.info/aero/PL7XJSuT7Dq_XPK_qmYMqfiBjbtHJRWigD

[@WarRior-rn4kb]

If you say a PARALEGAL CERTIFICATE is equivalent to a Law Degree and Passing the Bar exam, a lawyer will slap you in the mouth. THE equivalent of CISSP is a Master's Degree? Cmon now. You don't mean that. That's like saying $700 of a certificate that a high school graduate can get IS EQUAL TO $40,000 for a bachelor's degree, $40,000 master's degree, plus another $40,000 for a Ph.D ($120,000/$80,000 in student loans). So let's not do that. It's a cert that anyone can get after 5 years nothing more, nothing less, the icing on the cake. And the cake is a diploma. Let's not do the equivalent to non-sense.

[@InsideCloudAndSecurity]

Surprising but true! That statement comes from this report on the official ISC2 website. www.isc2.org/News-and-Events/Press-Room/Posts/2020/05/12/ISC2-CISSP-Certification-Now-Comparable-to-Masters-Degree-Standard#:~:text=Clearwater%2C%20FL%2C%20May%2012%2C,(RQF)%20in%20the%20UK%2C. And this doc confirms UK Master Degree Standard is equivalent of US Masters Degree - www.westminster.ac.uk/sites/default/public-files/general-documents/Overseas-Academic-Qualifications-Equivalency-Chart-Scholarships.pdf

[@WarRior-rn4kb]

@@InsideCloudAndSecurity time to push the president to forgive my student loans. If I was told that my CISSP was good enough, I would not have tried so hard in grad school, I would not have gone to grad school at all.

[@InsideCloudAndSecurity]

Since the UK made this declaration, perhaps The Queen will contribute to your student loans??? 🙄

[@WarRior-rn4kb]

@@InsideCloudAndSecurity I don't see a reason why she shouldn't. 😂 Thanks for listening to my rant. I appreciate the content. You make this toxic industry better by helping people with your content. Thanky you!

[@JeepTraveller]

Formula video pls

[@InsideCloudAndSecurity]

Already done. See "Just the Formulas" kzbin.info/www/bejne/qqWyfH2PhMqXhNE