CISSP Training - Domain 5 - Identity and Access Management - Under 10 minutes | My CISSP Study Guide

Identity and Access Management
Identity and Access Management comprises about 13% of the CISSP exam.

This domain helps information security professionals understand how to control the way users can access data. It covers:

Physical and logical access to assets;
Identification and authentication;
Integrating identity as a service and third-party identity services;
Authorization mechanisms; and
The identity and access provisioning lifecycle.

The CISSP curriculum breaks the subject matter down into a variety of Information Security topics referred to as domains. The CISSP examination is based on what (ISC)² terms the Common Body of Knowledge (or CBK). According to (ISC)², "the CISSP CBK is a taxonomy – a collection of topics relevant to information security professionals around the world. The CISSP CBK establishes a common framework of information security terms and principles that allow information security professionals worldwide to discuss, debate and resolve matters pertaining to the profession with a common understanding."

From 1st May 2021 there will be a domain refresh that will impact the weighting of the domains, the domains themselves will not change.

Security and Risk Management
Asset Security
Security Architecture and Engineering
Communication and Network Security
Identity and Access Management
Security Assessment and Testing
Security Operations
Software Development Security