Study Materials
- Fadis CISSP Process Guide v.21 by Fadi Sodah (aka madunix)
- Sunflower CISSP Study Guide by Maarten de Frankrijker
- The Memory Palace CISSP by Prashant Mohan
- CISSP Training by Luc Desfosses
- CISSP Videos by Thor Pedersen
Latest published version of the publications are found on the official Page
- NIST.CSWP.04162018 - “Framework for Improving Critical Infrastructure Cybersecurity”
- NIST.SP.800-12r1 - “Introduction to Computer Security”
- NIST.SP.800-30r1 - “Guide for Conducting Risk Assessments”
- NIST.SP.800-34r1 - “Contingency Planning”
- NIST.SP.800-37r1 - Withdrawn: “Risk Management Framework for Information Systems and Organizations”
- NIST.SP.800-37r2 - “Risk Management Framework for Information Systems and Organizations”
- NIST.SP.800-46r2 - “Guide to Enterprise Telework Remote Access, and Bringing Your Own Device Security”
- NIST.SP.800-53r4 - Withdrawn: “Security and Privacy Controls for Information Systems and Organizations”
- NIST.SP.800-53r5 - “Security and Privacy Controls for Information Systems and Organizations”
- NIST.SP.800-53Ar4 - “Asessing Security and Privacy Controls in Federal Information Systems and Organizations: Building Effective Assessment Plans”
- NIST.SP.800-61r2 - “Computer Security Incident Handling Guide”
- NIST.SP.800-86 - “Guide to Integrating Forensic Techniques into Incident Response”
- NIST.SP.800-88r1 - “Guidelines for Media Sanitization”
- NIST.SP.800-92 - “Guide to Computer Security Log Management”
- NIST.SP.800-115 - “Technical Guide to Information Security Testing and Assessment”
- NIST.SP.800-128 - “Guide for Security-Focused Configuration Management of Information Systems”
- NIST.SP.800-137 - “Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations”
- NIST.SP.800-145 - “The NIST Definition of Cloud Computing”
- NIST.SP.800-160v1 - “System Security Engineering”
- NIST.SP.800-207 - “Zero Trust Architecture”