CISSO study guide
CISSO · Work through your exam, one topic at a time.
The Certified Information Systems Security Officer (CISSO®) is a Mile2® certification aimed at professionals who own or aspire to the information systems security officer role - the person accountable for governance, architecture oversight, operations, incident response, and compliance alignment inside an organization. Mile2 describes its portfolio, including CISSO®, as university and ANSI/ANAB-aligned certifications built for hands-on, job-ready skills that employers trust, and it positions the certification track as relevant to security analysts, network engineers, IT managers, and executive leaders. The CISSO study guide has 4 sections and about 1,493 words.
01Information Security Governance and Risk Management
CISSO governance items ask you to connect business objectives to security decisions: who owns risk, how policy is structured, and how risk is measured, treated, and reported. Expect role questions (board, CISO, risk owner, control owner, auditor), policy-hierarchy questions (policy, standard, procedure, guideline), and quantitative risk math.
356 words, about 2 min02Security Architecture, Engineering, and Operations
Architecture, engineering, and operations questions test whether you can choose controls that hold up under failure, change, and attack. Topics include secure design principles, segmentation and zero trust, cryptographic selection, identity and access management, hardening and configuration baselines, vulnerability and patch management, logging, and the shared-responsibility model in cloud.
380 words, about 2 min03Incident Handling, Disaster Recovery, and Forensics
This domain covers the incident response lifecycle, business continuity and disaster recovery planning and metrics, backup and restoration, and forensic handling of digital evidence. Questions often ask what you do first, who declares a disaster, which plan applies, and how evidence stays admissible.
381 words, about 2 min04Compliance, Accreditation, and Legal/Regulatory Alignment
Compliance questions test how obligations become controls and evidence: which law, regulation, or standard applies; how frameworks map to each other; how audit and accreditation work; and how legal, privacy, and contractual duties shape security operations. Compliance is not security.
376 words, about 2 min