CC study plan

Define the CIA triad and give two concrete failure examples for each leg

Differentiate threat, vulnerability, risk, and exposure using a four-column example set

Classify 15 security controls as technical, administrative, or physical and as preventive, detective, or corrective

Explain defense in depth, least privilege, separation of duties, and zero trust in your own words

Summarize the ISC2 Code of Ethics canons and apply them to two short scenarios

Distinguish policies, standards, procedures, and guidelines and match 12 sample statements to the right document type

Identify who owns data versus who owns systems versus who is the custodian in five org-chart scenarios

Describe each phase of the risk management process from identification through treatment and monitoring

Compare the four risk treatment options and justify a chosen option for four sample risks

Rank data classification tiers and state handling rules for each tier

Build a risk register with 10 entries that each include likelihood, impact, score, owner, and treatment

Outline the components of a business impact analysis and state what an RTO and RPO measure

Explain how security awareness training, metrics, and audits each support governance

Describe third-party and supply chain risk assessment steps from onboarding through offboarding

List the legal, regulatory, and contractual obligations a security program must account for

Differentiate identification, authentication, authorization, and accountability across a login-to-resource-access walkthrough

Compare the authentication factors and select an appropriate MFA scheme for four scenarios

Distinguish MAC, DAC, RBAC, and ABAC and assign the best model to five access scenarios

Explain SSO, federation, SAML, OAuth, and OIDC and state what problem each one solves

Sequence the identity lifecycle from proofing and provisioning through deprovisioning

Describe privileged access management controls and justify just-in-time access for a sample admin team

Compare password, biometric, token, and behavioral authentication on strength and usability

Map the seven OSI layers to at least two protocols and one attack at each layer

Explain how segmentation, microsegmentation, and zero trust architecture reduce lateral movement

Differentiate IaaS, PaaS, and SaaS and divide 10 controls between provider and customer under the shared responsibility model

Compare firewall, IDS, IPS, WAF, CASB, and SASE by function and placement

Explain TLS, IPsec VPN, and wireless security controls including WPA2 and WPA3 differences

Identify container, virtualization, and cloud-specific risks and matching mitigations

Describe common network attacks such as spoofing, on-path, DNS poisoning, and DDoS and state one countermeasure for each

Sequence the incident response lifecycle and state the objective and key output of each phase

Differentiate BCP from DR and write sample RTO and RPO targets for three business functions

Compare backup types and apply the 3-2-1 rule to a sample environment

Explain how logging, SIEM correlation, and monitoring support detection and triage

Order the vulnerability management cycle from discovery through remediation and verification

Describe forensic evidence handling steps that preserve integrity and chain of custody

Re-review every missed question from weeks 1 to 7 and write a one-line reason for each correction

Recite the key facts of each domain from memory using a self-built flashcard deck

Complete two timed full-length practice exams under exam conditions

Identify your three weakest objectives and drill 20 targeted questions on each