CISSP Complete Study Guide: Volume 1 — Domains 1 to 4: Security Foundations and Technical Architecture

CISSP Complete Study Guide — Volume 1 of 2 Domains 1–4 136 Concepts 136 UK Case Studies 136 Exam Questions Volume 1 covers the first four CISSP domains — the foundation of the entire certification. Every concept follows the same three-part structure: a full explanation, a realistic UK financial services case study, and a CISSP-style exam question with the correct answer highlighted and full rationale for all four options. Domains covered in this volume Domain 1 — Security and Risk Management (48 concepts, 10–13% of exam): CIA triad, governance frameworks, risk management, UK GDPR, FCA/PRA regulation, DORA, ethics, personnel security, BCP/DR, and digital forensics. Domain 2 — Asset Security (22 concepts, 10–11% of exam): Data classification, ownership, lifecycle management, DLP, DRM, cloud data security, and GDPR-aligned data handling. Domain 3 — Security Architecture and Engineering (33 concepts, 13% of exam): Cryptography, security models, PKI, cloud architecture, IoT, ICS/SCADA, and physical security. Domain 4 — Communication and Network Security (33 concepts, 13% of exam): OSI/TCP-IP, DNS/BGP security, Zero Trust, wireless, VPN, DDoS defence, and network attacks. Why this guide is different Every case study is set in a fictional UK financial services organisation and reflects real FCA, PRA, DORA, and UK GDPR regulatory pressures. The exam questions replicate the scenario-based, judgement-focused format of the actual CISSP examination. About the author Jay Prakash is an Information Security Manager with 13+ years in UK financial services and banking cybersecurity. He holds CISA, CISM, CRISC, CISSP, CDPSE, AZ-500, CEH, CFE, and PMP certifications. Oxford alumnus and MBA student at IIM Shillong. Volume 2 (Domains 5–8) is available separately.