Chapter 3 of 8 · ISC2 CISSP
Security Architecture and Engineering
Design principles, security models, system capabilities, vulnerabilities, cryptography, facility security and lifecycle.
- 8topics
- 26 minfast track
- 2diagrams and exhibits
- 13%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1Secure Design PrinciplesCISSP secure design principles: least privilege, defense in depth, secure defaults, fail securely, separation of duties, zero…3 min
- 2Security ModelsBell-LaPadula, Biba, Clark-Wilson, Brewer-Nash, Graham-Denning and other CISSP security models, with the rules each enforces and…Diagram4 min
- 3Control Selection and System Security CapabilitiesSelecting controls from system security requirements, evaluation criteria such as Common Criteria, and capabilities like memory…3 min
- 4Vulnerabilities of Architectures and SystemsAssessing and mitigating weaknesses in client, server, database, cloud, ICS, IoT, embedded, virtualized, container, serverless…3 min
- 5Cryptographic SolutionsSymmetric and asymmetric cryptography, hashing, digital signatures, PKI, key management practices and quantum-resistant…Diagram4 min
- 6Cryptanalytic AttacksAttacks on cryptography: brute force, known plaintext, side channels, timing, fault injection, man-in-the-middle, pass the hash…3 min
- 7Site and Facility SecuritySite and facility design with CPTED, data center and wiring closet controls, media storage, evidence storage, power, HVAC, fire…3 min
- 8Information System LifecycleManaging the information system lifecycle, from stakeholder needs and requirements through design, verification, operation and…3 min
About this chapter
What this chapter covers
Security Architecture and Engineering is worth 13 percent of the CISSP exam and is one of the most technical domains. It asks how security is designed into systems, from principles and formal models to cryptography, facilities and the full system lifecycle.
It covers secure design principles (threat modeling, least privilege, defense in depth, secure defaults, fail securely, separation of duties, keep it simple, zero trust, privacy by design, trust but verify, shared responsibility, SASE), security models, control selection, information system security capabilities, vulnerabilities of architectures (client, server, database, cryptographic systems, industrial control systems, cloud, distributed, IoT, microservices, containers, serverless, embedded, high-performance, edge and virtualized systems), cryptographic solutions, cryptanalytic attacks, site and facility design, site and facility controls and managing the information system lifecycle.
How the topics fit together
Expect questions on which principle a design follows, which model rule a scenario breaks, which cryptographic tool provides a given property and which physical control fits a facility risk.
Know what each cryptographic tool provides. Symmetric encryption gives confidentiality; hashing gives integrity; digital signatures give integrity, authenticity and nonrepudiation.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with tables and examples.
- What to remember for the exam: the facts to memorise and how questions are phrased.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Ready for more practice?
The full ISC2 CISSP question bank has 1,113 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by ISC2. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.