Certified Information Systems Security Professional (CISSP) Preparation

Program facts

Study fee

Free

subjects

8

lessons

36

Estimated time

34 hours

Content last reviewed

21 October 2026

Access period

30 days

Study language

Arabic and English

About the program

Eight modules and 36 lessons cover ethics, risk, assets, architecture, networks, identity, assessment, operations and secure development. Each lesson explains a decision and includes a worked case and practice with feedback. The material has 36 learning checks, 36 internal assessment questions and 16 mock questions; both languages represent the same logical items.

Practical relevance

Fictional cases in incident response, continuity, architecture, identity and development test evidence-based decisions.

Why this program

The program connects technical knowledge to responsible decisions: which asset, evidence, authority and option fit the constraints?

Career relevance

It helps experienced security practitioners organize concepts and explain tradeoffs; it guarantees no eligibility, exam result or employment.

What you will learn

• Analyze Security and Risk Management
• Analyze Asset Security
• Analyze Security Architecture and Engineering
• Analyze Communication and Network Security
• Analyze Identity and Access Management
• Analyze Security Assessment and Testing
• Analyze Security Operations
• Analyze Software Development Security

Who it is for

• Information security practitioners reviewing CISSP domains.
• Security engineers, security operations analysts and system administrators preparing for the CISSP exam.
• Information security, risk and audit managers who want a structured review of the eight knowledge domains with applied cases.
• Consultants and professionals moving from technical roles into security leadership who need to connect controls with risk and management decisions.

Curriculum

1. Subject 1 Open for free

   Security and Risk Management

   Apply Security and Risk Management decisions.

   6 lessons · 5 hours

   1. Ethics and security objectives 50 min
   2. Governance and due care 50 min
   3. Obligations, policy and investigations 50 min
   4. Business impact analysis 50 min
   5. Personnel and risk assessment 50 min
   6. Threat modeling, supply chain and awareness 50 min
2. Subject 2

   Asset Security

   Apply Asset Security decisions.

   3 lessons · 2.5 hours

   1. Classification and handling 50 min
   2. Ownership and data lifecycle 50 min
   3. Retention and data-state controls 50 min
3. Subject 3

   Security Architecture and Engineering

   Apply Security Architecture and Engineering decisions.

   5 lessons · 4 hours

   1. Secure design and security models 50 min
   2. Compute platforms and shared responsibility 50 min
   3. Cryptography, keys and attacks 50 min
   4. Facility, power and fire protection 50 min
   5. System lifecycle 50 min
4. Subject 4

   Communication and Network Security

   Apply Communication and Network Security decisions.

   4 lessons · 3.5 hours

   1. Traffic paths and segmentation 50 min
   2. Protocols and wireless transport 50 min
   3. Infrastructure and endpoint controls 50 min
   4. Administrative and third-party channels 50 min
5. Subject 5

   Identity and Access Management

   Apply Identity and Access Management decisions.

   4 lessons · 3.5 hours

   1. Identity proofing and authentication 50 min
   2. Federation and single sign-on 50 min
   3. Authorization models 50 min
   4. Human and service account lifecycle 50 min
6. Subject 6

   Security Assessment and Testing

   Apply Security Assessment and Testing decisions.

   4 lessons · 3.5 hours

   1. Control assessment strategy 50 min
   2. Vulnerability and penetration testing 50 min
   3. Metrics and exception reporting 50 min
   4. Audit and follow-up 48 min
7. Subject 7

   Security Operations

   Apply Security Operations decisions.

   6 lessons · 5 hours

   1. Investigation, logging and monitoring 50 min
   2. Configuration, privilege and media 50 min
   3. Incident response and detection 50 min
   4. Patching and change 48 min
   5. Recovery and continuity 50 min
   6. Physical security and personnel safety 48 min
8. Subject 8

   Software Development Security

   Apply Software Development Security decisions.

   4 lessons · 3.5 hours

   1. Security across the SDLC 50 min
   2. Supply chain and application testing 50 min
   3. Acquired software assurance 50 min
   4. Secure coding and APIs 50 min

Subjects unlock in sequence as you progress.

Strengths

• Eight-domain coverage under the current official outline.
• Worked decisions and explanations in both languages.
• Separate learning checks, internal assessment and mock.

Evidence basis

The ISC2 outline defines scope; technical rules use topic-specific primary sources.

How the route works

Professional Certification Preparation programs help learners prepare for a recognized external certification through structured knowledge, review, practice questions, and readiness assessments. Arab Platform for Professional Studies (ARPS) does not administer the certification owner's official exam.

Structured self-paced study aligned to the current external certification scope, with knowledge review, practice questions, readiness checks, and internal mock assessments.

• Focused preparation for a specific external certification.
• Content aligned to the current official exam scope when available.
• Practice questions and internal readiness assessments.
• Clear separation between Arab Platform for Professional Studies (ARPS) preparation and the official external exam.

Assessment

The route includes an internal assessment for Arab Platform for Professional Studies (ARPS) completion eligibility and separate mock/readiness assessments that are not the external official exam.

Assessment attempts: 2 per assessment, 7 days apart

The pass mark is announced before the program is published.

Certificate

The Arab Platform for Professional Studies (ARPS) credential confirms completion of the preparation program only; the target professional certification requires passing the external issuer's examination under its rules.

Every certificate has a public verification code. Verify a certificate

Verification example: a real issued certificate

Disclaimer: An internal completion credential, if issued, records preparation only and is not CISSP certification or a professional license.

Program questions