

ISC2 Official Resources
- CSSLP – Certified Secure Software Lifecycle Professional (ISC2 Official Certification Web Page)
- *CSSLP Certification Exam Outline (Effective September 15, 2023)
- CSSLP Study Tools and Resources
- *CBK Suggested References



The Network Mapper (Nmap) utility can do the following tasks:
If none is specified, nmap will do all the above.
$ nmap 10.10.10.100/30
Starting Nmap 7.93 ( https://nmap.org ) at 2024-02-18 06:34 PST
Nmap scan report for kali-01.lab.wuson.org (10.10.10.100)
Host is up (0.00034s latency).
Not shown: 999 closed tcp ports (conn-refused)
PORT STATE SERVICE
22/tcp open ssh
Nmap scan report for 10.10.10.101
Host is up (0.00040s latency).
Not shown: 999 closed tcp ports (conn-refused)
PORT STATE SERVICE
22/tcp open ssh
Nmap done: 4 IP addresses (2 hosts up) scanned in 1.31 seconds
Continue reading 

Please Note: Effective April 15, 2024, the CISSP exam will be based on a refreshed exam outline. Please refer to the CISSP Exam Outline and our FAQs for more information.
Source: CISSP Certification Exam Outline Summary
Effective April 15, 2024, the time limit for the CAT exam will be a maximum of three (3) hours. Candidates taking the CAT version of the exam will see a minimum of 100 and a maximum of 150 items.
Source: CISSP Computerized Adaptive Testing
The linear exam length will remain 6 hours for 225 scored items. Candidates taking the linear version of the exam will receive 225 total items.
Effective 15 April 2024, the following exams will only be delivered in the listed languages:
Source: ISC2 Exam Languages Availability
CC – English, Chinese, German, Japanese
CCSP – English, Chinese, German, Japanese
CISSP – English, Chinese, German, Japanese, Spanish
For Chinese, please see notice at top of this page
SSCP – English, Japanese, Spanish




With 20 study hours or so, I passed the ISC2 CGRC (formerly known as CAP) exam today (Jan 9, 2024). As a CISSP, I was reluctant to pursue the entry-level exam CC and US government-specific CGRC/CAP because CISSP covers job practices well enough. However, as a CISSP instructor, I must wear the same shoes to prove to my students that CC is a fantastic starter and a significant milestone in the CISSP journey. Moreover, CGRC is a good personal goal for learning and growth in 2024.
Having completed the exam today, I’d like to thank Nancy Allen, also a CGRC holder, who inspired me to push forward to both CGRC and CC. She is quite active in the community and passionate about sharing and helping people. Thank you so much for your contributions and advancing the profession!
I’m thankful for Prabh Nair‘s valuable sharing, How to Prepare for CGRC 2024. He summarized key points for CGRC aspirants and provided effective guidance.
I am grateful to Fadi Sodah (aka Madunix), author of the CISSP Process Guide, for his ongoing quality write-ups. Even though Fadi is undergoing a disease recovery, he keeps writing and helping people. He inspired and motivated me a lot when I was suffering challenges. Thank you, Fadi!
Continue reading
A business is an entity with the capability of performing various functions that add value by transforming incoming things into outgoing results to deliver products and services. A business function comprises one or more processes, which can be broken down into minor activities and tasks. Activities can be assigned to the role level and tasks at the individual level.

An individual takes actions, step by step, per the standard operating procedure (SOP) to complete a task. The term operations means that a business exercises its capabilities to perform a combination of business functions to deliver products and services continuously.


Many CISSP exam candidates in Taiwan received an email from ISC2 today that the linear CISSP exam is not available in simplified Chinese until further notice due to irregularities in candidates’ results. Their exam appointments are either canceled or rescheduled. I’m unsure if it is a system malfunction or an exam irregularity problem. Suppose it’s an exam irregularity in the simplified Chinese exam. In that case, I’m glad to see the mitigation actions, as ISC2 has been doing a great job maintaining the integrity of the CISSP exam.
However, I hope ISC2 can make simplified Chinese available in Taiwan soon after the investigation. People in Taiwan use traditional Chinese daily and feel more comfortable with simplified Chinese than English. Taking English exams is more challenging for most Taiwanese than doing Simplified Chinese ones.
Taiwan and China are two independent countries. If something goes wrong in China, I hope treatments applied to Taiwan can be considered separately.