cissp exam outline 2015中文.pdf

Effective Date: April 15, 2015 (Exam Outline) Effective Date: January 1, 2015 1 ? 2015 International Information Systems Security Certification Consortium, Inc. All Rights Reserved. Duplication for commercial purposes is prohibited. Revised 1.14.15 V10 April 15, 2015 考 试 大 纲 考生信息公告 生效日期：2015年 4月 15日 (ISC)2 注册信息系统安全师 Effective Date: April 15, 2015 Non-Discrimination (ISC)2 does not discriminate against candidates on the basis of nationality, gender, religion, race, ethnicity, sexual orientation, age or disability. For further information on (ISC)2’s non-discrimination policy, please visit /legal-info-policies.aspx. 非歧视性原则 (ISC)2 绝不会因考生的国籍、性别、宗教信仰、种族、族裔背景、性别取向、年龄或残障而给 予歧视性待遇。更多有关(ISC)2 非歧视性政策的信息，敬请访问: /legal-info-policies.aspx. 2 ? 2015 International Information Systems Security Certification Consortium, Inc. All Rights Reserved. Duplication for commercial purposes is prohibited. Revised 1.14.15 V10 Effective Date: April 15, 2015 1) Security and Risk Management (e.g., Security, Risk, Compliance, Law, Regulations, Business Continuity) 安全与风险管理（例如：安全、风险、合规、法律、法规与业务连续性） 8 Overview 概述 8 Key Areas of Knowledge 关键知识领域 9 2) Asset Security (Protecting Security of Assets) 资产安全（保护资产的安全） 14 Overview 概述 14 Key Areas of Knowledge 关键知识领域 15 3) Security Engineering (Engineering and Management of Security) 16 安全工程（安全工程与管理） 16 Overview 概述 16 Key Areas of Knowledge 关键知识领域 17 4) Communication and Network Security (Designing and Protecting Network Security) 20 通信与网络安全（设计及保护网络安全）……..……………………………………………………. 20 Overview 概述 20 Key Areas of Knowledge 关键知识领域 21 5) Identity and Access Management (Controlling Access and Managing Identity) 23 身份与访问管理 （访问控制与身份