Cert EspressoLearn. Practise. Find your flow.

A LITTLE FOCUS.
A BIG NEXT STEP.

Your pace. Your space.
ISC2 · CISSP · FREE COURSE

ISC2 CISSP

34 video lessons and 248 original practice questions. Follow the course, then put each idea into practice.

YouTube loads only after you press play. Watch on YouTube ↗

Try 5 questions →My learning →

Course chapters

34 lessons
  1. 1Ethics and security concepts3:23 · Lesson video
  2. 2Governance and policies9:34 · Full-course chapter
  3. 3Law, regulation, and investigations15:30 · Full-course chapter
  4. 4Risk management22:05 · Full-course chapter
  5. 5Threat modeling and supply chain risk28:29 · Full-course chapter
  6. 6Business continuity, personnel security, and awareness34:08 · Full-course chapter
  7. 7Classifying and handling assets46:51 · Full-course chapter
  8. 8The data lifecycle and asset management52:31 · Full-course chapter
  9. 9Data security controls58:34 · Full-course chapter
  10. 10Secure design principles and security models1:11:01 · Full-course chapter
  11. 11Selecting controls and system security capabilities1:17:43 · Full-course chapter
  12. 12Vulnerabilities of architectures1:24:00 · Full-course chapter
  13. 13Cryptographic solutions1:30:43 · Full-course chapter
  14. 14PKI, signatures, and cryptanalytic attacks1:37:36 · Full-course chapter
  15. 15Site and facility security, and the system lifecycle1:44:06 · Full-course chapter
  16. 16Network models and protocols1:57:26 · Full-course chapter
  17. 17Network architectures2:04:10 · Full-course chapter
  18. 18Network components and endpoint security2:10:41 · Full-course chapter
  19. 19Secure communication channels2:16:25 · Full-course chapter
  20. 20Access, identification, and authentication2:29:13 · Full-course chapter
  21. 21Federation and authentication systems2:35:42 · Full-course chapter
  22. 22Authorization and the provisioning lifecycle2:42:30 · Full-course chapter
  23. 23Assessment strategies and audits2:56:14 · Full-course chapter
  24. 24Security control testing3:02:40 · Full-course chapter
  25. 25Security process data and reporting3:08:52 · Full-course chapter
  26. 26Investigations and forensics3:21:27 · Full-course chapter
  27. 27Logging, monitoring, and detection3:27:01 · Full-course chapter
  28. 28Operations, configuration, patch, and change management3:33:30 · Full-course chapter
  29. 29Resource protection and incident management3:39:30 · Full-course chapter
  30. 30Recovery strategies and disaster recovery3:44:52 · Full-course chapter
  31. 31Physical security and personnel safety3:51:07 · Full-course chapter
  32. 32Security in the SDLC and development ecosystems4:03:24 · Full-course chapter
  33. 33Software security assessment and acquired software4:10:06 · Full-course chapter
  34. 34Secure coding4:15:52 · Full-course chapter

Practice by domain

Governance and Risk Management12 video practice questions →Asset Security12 video practice questions →Architecture and Engineering12 video practice questions →Communication and Networks12 video practice questions →Identity and Access12 video practice questions →Assessment and Testing12 video practice questions →Security Operations12 video practice questions →Software Development12 video practice questions →

Practise the reasoning.

Choose immediate explanations, or complete a mock exam with feedback at the end. The mock questions are also available in everyday practice.

Try 5 questions →Mock exam →

The optional 60-minute timer is a practice setting, not the official exam duration.