CyberRamen

Eight domains: Security & Risk Management, Asset Security, Security Architecture, Communication & Network Security, IAM, Security Assessment, Security Operations, and Software Development Security. Tests managerial and architectural thinking, not just technical knowledge.

Senior security professionals, security managers, architects, consultants, and CISO-track candidates. Typically requires 5+ years of broad security experience.

Plan 3–5 months of study. Start with the Official Study Guide for domain coverage, then use the All-in-One for depth on weak areas. The CAT format means questions adapt — focus on understanding concepts deeply rather than memorizing facts. Practice "think like a manager" for exam mindset.

• Primary
  ISC2 CISSP Official Study Guide, 10th Edition
  Chapple, Stewart, Gibson — Sybex, 2024
  Standard primary text, fully updated to April 2024 outline. 900+ practice questions.
• Complementary
  CISSP All-in-One Exam Guide, 9th Edition
  Shon Harris, Fernando Maymí — McGraw-Hill
  Deep narrative-style coverage. Excellent for second-pass conceptual depth.
• Last-Week
  Eleventh Hour CISSP, 3rd Edition
  Eric Conrad et al.
  Focused summary of highest-yield material for final review.
• Practice
  ISC2 CISSP Official Practice Tests
  Chapple et al.
  High-quality exam-style question bank.

• ISC2 Official Training — Self-paced and instructor-led options.
• Destination Certification MindMap — Free YouTube series mapping all 8 domains visually.
• Thor Teaches (Udemy) — Popular video course covering all domains.

• Boson CISSP Practice Exams — Widely regarded as closest to real exam difficulty.
• ISC2 Official Practice Tests — Domain-mapped questions from the cert body.

Six domains covering cloud concepts, architecture, data security, platform security, application security, and security operations in cloud environments.

Cloud architects, security engineers, and consultants working with cloud deployments. Pairs well with CISSP.

Study the CSA Cloud Controls Matrix alongside the study guide. Focus on understanding shared responsibility models deeply.

• Primary
  CCSP Official Study Guide, 3rd Edition
  Sybex
  Primary prep aligned with current cloud security domains.
• Practice
  CCSP Official Practice Tests
  Sybex
  Exam-style questions.

• ISC2 Official Training — Self-paced option available.

• Boson CCSP — Practice exam engine.

Seven domains: access controls, security operations, risk identification, incident response, cryptography, network security, and systems/application security.

IT administrators, network engineers, and security analysts looking to validate hands-on security skills.

Good stepping stone to CISSP. Focus on practical operational knowledge.

• Primary
  Official (ISC)2 SSCP CBK, 3rd Edition
  Canonical domain reference.
• Complementary
  SSCP Official Study Guide
  Sybex
  Structured study guide tailored to SSCP scope.

Security principles, business continuity, access control concepts, network security, and security operations fundamentals.

Career changers, students, and IT professionals entering cybersecurity. Free training available from ISC2.

Use the free ISC2 CC course as primary prep. The exam is relatively straightforward for anyone with basic IT knowledge.

• Primary
  Official ISC2 CC Study Guide
  ISC2 / partnered publishers
  Official guide plus free ISC2 CC course are the most aligned resources.

• ISC2 Free CC Course — Free self-paced training from ISC2.

Risk Management Framework (RMF), authorization processes, and continuous monitoring for information systems.

GRC analysts, compliance officers, authorization officials, and security control assessors.

Strong focus on NIST RMF. Study the RMF steps thoroughly.

• Primary
  Official (ISC)2 Guide to the CGRC (CAP) CBK
  Reference for RMF-centric content.

Secure software concepts, requirements, architecture, design, implementation, testing, deployment, operations, and supply chain management.

Software developers, architects, and DevSecOps engineers focused on secure development practices.

Focus on understanding secure SDLC phases and how security integrates into each stage.

• Primary
  Official (ISC)2 Guide to the CSSLP CBK, 2nd Edition
  Domain reference for secure SDLC topics.
• Complementary
  CSSLP Certification All-in-One Exam Guide
  McGraw-Hill
  Supplementary explanations and practice questions.

Five domains: Information Systems Auditing Process, Governance and Management of IT, Information Systems Acquisition/Development/Implementation, Information Systems Operations and Business Resilience, Protection of Information Assets.

IT auditors, compliance managers, and governance professionals. Often required for Big Four audit roles.

The ISACA Review Manual is essential — the exam questions are written by the same organization. Focus on understanding the "ISACA way" of thinking about audit controls and risk.

• Primary
  ISACA CISA Review Manual (latest edition)
  ISACA
  The definitive text for the 5 CISA domains.
• Practice
  CISA Review QAE Database
  ISACA
  Domain-mapped question practice.

• ISACA Online Review Course — Self-paced with practice questions.

• ISACA QAE Database — Official question bank — essential.

Four domains: Information Security Governance, Information Risk Management, Information Security Program, and Incident Management.

Security managers, directors, and CISO-track professionals. Complements CISSP with a management focus.

Think like a security manager, not a technician. The exam tests strategic decision-making and governance concepts.

• Primary
  ISACA CISM Review Manual (latest edition)
  ISACA
  Official review manual.
• Complementary
  CISM All-in-One Exam Guide
  Peter H. Gregory — McGraw-Hill
  Comprehensive exam-focused guide with practice questions.

• ISACA Online Review Course — Official self-paced option.

• ISACA QAE Database — Official question bank.

IT risk identification, assessment, response/mitigation, and control monitoring and reporting.

Risk analysts, risk managers, compliance professionals, and IT professionals involved in risk management.

Focus on risk frameworks and quantitative vs qualitative risk analysis methods.

• Primary
  ISACA CRISC Review Manual (latest edition)
  ISACA
  Primary resource for IT risk domains.
• Practice
  CRISC Review QAE
  ISACA
  Official practice questions.

• ISACA QAE Database — Official question bank.

Enterprise IT governance frameworks, strategic management, benefits realization, risk optimization, and resource optimization.

CIOs, IT directors, and senior governance professionals.

Study COBIT framework thoroughly. Think at the enterprise/board level.

• Primary
  ISACA CGEIT Review Manual
  ISACA
  Main text for enterprise IT governance domains.

Privacy governance, architecture, data lifecycle, and technology implementation for privacy compliance.

Privacy engineers, DPOs, and engineers implementing GDPR/privacy controls in systems.

Understand privacy-by-design principles and how they translate to technical controls.

• Primary
  ISACA CDPSE Review Manual
  ISACA
  Main prep reference for privacy engineering.

General security concepts, threats/vulnerabilities/mitigations, security architecture, security operations, and security program management/oversight.

Entry-level security professionals, IT administrators moving into security, DoD 8570 baseline certification. Most widely required entry-level security cert.

Performance-based questions (PBQs) require hands-on skills — set up a home lab. Study the exam objectives checklist methodically. Don't skip the PBQs in practice.

• Primary
  CompTIA Security+ Study Guide (SY0-701)
  Sybex
  Updated to current objectives with chapter reviews and online practice.
• Complementary
  CompTIA Security+ (SY0-701) Certification Guide
  Ian Neil
  Focused, exam-driven book with discount voucher. Frequently recommended 2024–2026.

• Professor Messer (YouTube) — Free complete video course covering all objectives.
• CompTIA CertMaster — Official adaptive learning and labs.

• Dion Training Practice Exams — Highly rated, includes PBQ simulations.
• Professor Messer Practice Exams — Affordable, well-aligned with exam difficulty.

Security operations, vulnerability management, incident response, and reporting and communication.

SOC analysts, threat analysts, and security engineers. Natural next step after Security+.

Focus on log analysis, SIEM operations, and vulnerability management workflows. Practical experience with tools is important.

• Primary
  CompTIA CySA+ Study Guide (CS0-003)
  Sybex
  Official-aligned overview and practice questions.

• TryHackMe SOC Level 1 Path — Hands-on SOC training.

• Dion Training CySA+ Practice Exams — Well-structured practice sets.

Planning and scoping, information gathering, attacks and exploits, reporting and communication, and tools and code analysis.

Aspiring penetration testers. Bridges Security+ to OSCP-level skills.

Combine book study with hands-on lab practice. TryHackMe and HackTheBox are good complements.

• Primary
  CompTIA PenTest+ All-in-One Exam Guide
  McGraw-Hill
  Comprehensive coverage with scenario-style questions.
• Alternative
  PenTest+ Study Guide
  Sybex
  Alternative primary aligned with exam objectives.

• TryHackMe — Guided pentesting rooms and paths.
• HackTheBox — Practical hacking challenges.

Security architecture, operations, engineering, cryptography, and governance/risk/compliance at an enterprise level.

Senior security architects and engineers. Technical counterpart to CISSP (hands-on vs management).

Focus on enterprise scenarios and architectural decision-making. PBQs are significant.

• Primary
  CASP+ CompTIA Advanced Security Practitioner Study Guide
  Sybex
  Enterprise security architecture with hands-on scenarios.

Defense-in-depth, access control, cryptography, network security, incident handling, and security policy. Aligned with SANS SEC401.

Security practitioners seeking a rigorous broad security foundation beyond Security+.

SANS SEC401 course is the primary prep. Build a thorough index of your course materials — the exam is open-book.

• Primary
  SANS SEC401 Course Materials
  SANS Institute
  The course books are the exam prep. No substitute.

• SANS OnDemand — Self-paced SEC401 access.

• GIAC Practice Tests — 2 practice tests included with exam attempt.

Penetration testing methodology, reconnaissance, scanning, exploitation, password attacks, and reporting. Aligned with SANS SEC560.

Penetration testers and red team operators seeking SANS-validated offensive skills.

SEC560 course is essential. Index your books well for the open-book exam.

• Primary
  SANS SEC560 Course Materials
  SANS Institute
  Course books are the exam prep.

• GIAC Practice Tests — Included with exam attempt.

Incident handling process, attack techniques, detection, and response. Aligned with SANS SEC504.

Incident responders, SOC analysts, and threat hunters.

SEC504 is the gold standard IR course. Hands-on labs are critical for understanding.

• Primary
  SANS SEC504 Course Materials
  SANS Institute
  Course books are the exam prep.

• GIAC Practice Tests — Included with exam attempt.

Network traffic analysis, intrusion detection, TCP/IP, and protocol analysis. Aligned with SANS SEC503.

Network security analysts, IDS/IPS analysts, and network forensics practitioners.

Deep TCP/IP knowledge is essential. Practice with Wireshark extensively.

• Primary
  SANS SEC503 Course Materials
  SANS Institute
  Course books are the exam prep.

• GIAC Practice Tests — Included with exam attempt.

Advanced digital forensics, threat hunting, incident response, memory forensics, and timeline analysis. Aligned with SANS FOR508.

Digital forensic analysts, incident responders, and threat hunters.

FOR508 is the recommended course. Build a strong index and practice with forensic images.

• Primary
  SANS FOR508 Course Materials
  SANS Institute
  Course books are the exam prep.

• GIAC Practice Tests — Included with exam attempt.

Windows forensics, browser forensics, email analysis, and evidence acquisition. Aligned with SANS FOR500.

Digital forensic examiners and law enforcement investigators.

FOR500 is the primary course. Focus on Windows artifact analysis.

• Primary
  SANS FOR500 Course Materials
  SANS Institute
  Course books are the exam prep.

Malware analysis, reverse engineering, behavioral analysis, and code/document analysis. Aligned with SANS FOR610.

Malware analysts, reverse engineers, and threat intelligence analysts.

FOR610 course is essential. Practice with real malware samples in sandboxed environments.

• Primary
  SANS FOR610 Course Materials
  SANS Institute
  Course books are the exam prep.

Web application penetration testing, injection attacks, authentication flaws, and client-side attacks. Aligned with SANS SEC542.

Web application security testers and developers.

SEC542 course plus extensive practice on web app testing platforms.

• Primary
  SANS SEC542 Course Materials
  SANS Institute
  Course books are the exam prep.

Foundational cybersecurity concepts, computer functions, networking, cryptography, and basic security principles.

Career starters and professionals new to cybersecurity.

Entry-level GIAC cert. Good starting point before more advanced SANS courses.

• Primary
  SANS SEC275 Course Materials
  SANS Institute
  Foundational course materials.

Advanced exploitation techniques, network attacks, crypto attacks, fuzzing, and exploit development. Aligned with SANS SEC660.

Advanced penetration testers and exploit developers.

SEC660 is extremely technical. Strong programming and networking knowledge required beforehand.

• Primary
  SANS SEC660 Course Materials
  SANS Institute
  Course books are the exam prep.

Network penetration testing, web application attacks, Active Directory exploitation, privilege escalation, client-side attacks, and report writing.

Aspiring and practicing penetration testers. The industry's most recognized hands-on offensive certification.

Complete ALL PEN-200 lab machines. Practice on HackTheBox and Proving Grounds. The exam is 100% practical — 23 hours 45 minutes to compromise machines and write a report. Time management and methodology are critical. Document everything during labs.

• Primary
  OffSec PEN-200 Course Materials
  OffSec
  PDFs and labs that come with enrollment. No substitute.
• Community
  The Web Application Hacker's Handbook
  Stuttard & Pinto
  Deep web exploitation reference.
• Community
  Penetration Testing: A Hands-On Introduction
  Georgia Weidman
  Broad practical intro to penetration testing.
• Community
  The Hacker Playbook series
  Scenario-style offensive playbooks.

• OffSec Proving Grounds — Practice machines similar to OSCP labs.
• HackTheBox — Retired machines with walkthroughs. TJNull's OSCP list is essential.
• TryHackMe — Guided offensive paths for building fundamentals.

• OffSec Proving Grounds Practice — Closest to actual exam machines.

Advanced penetration testing, AV evasion, process injection, lateral movement, and Active Directory attacks.

Experienced penetration testers looking to advance beyond OSCP.

OSCP is a prerequisite skill-wise. Focus on evasion techniques and AD attack chains.

• Primary
  OffSec PEN-300 Course Materials
  OffSec
  Course materials and labs.

Advanced web application attacks, source code review, authentication bypass, and custom exploit development.

Web application security specialists and code auditors.

Strong programming skills required. Practice source code review extensively.

• Primary
  OffSec WEB-300 Course Materials
  OffSec
  Course materials and labs.

Wireless network security assessment, WPA/WPA2 attacks, rogue access points, and wireless enumeration.

Penetration testers specializing in wireless assessments.

You need compatible wireless hardware. Practice in a controlled lab environment.

• Primary
  OffSec PEN-210 Course Materials
  OffSec
  Course materials and labs.

Windows exploit development, buffer overflows, ROP chains, DEP/ASLR bypass, and shellcode development.

Exploit developers and advanced security researchers.

Strong x86 assembly and C knowledge required. This is OffSec's most technically demanding cert.

• Primary
  OffSec EXP-301 Course Materials
  OffSec
  Course materials and labs.

Security monitoring, log analysis, SIEM operations, threat detection, and incident investigation.

SOC analysts and defensive security practitioners.

OffSec's defensive cert. Focus on practical detection and analysis skills.

• Primary
  OffSec SOC-200 Course Materials
  OffSec
  Course materials and labs.

Footprinting, scanning, enumeration, system hacking, malware, sniffing, social engineering, DoS, session hijacking, web server/app hacking, SQL injection, wireless, mobile, IoT, cloud, and cryptography.

Security professionals seeking a broad ethical hacking certification. Often required for government/DoD roles.

CEH is knowledge-based (MCQ), not hands-on like OSCP. Focus on memorizing tool names, attack categories, and methodology steps. CEH Practical (separate exam) adds a hands-on component.

• Primary
  CEH v13 Official Courseware
  EC-Council
  Official curriculum covering all exam domains.
• Complementary
  CEH All-in-One Exam Guide
  Matt Walker — McGraw-Hill
  Comprehensive exam-focused coverage.

• EC-Council iLabs — Official hands-on practice environment.

• Boson CEH Practice Exams — Well-regarded practice questions.

Digital forensics process, evidence handling, OS forensics, network forensics, web forensics, database forensics, cloud forensics, and malware forensics.

Digital forensic investigators and law enforcement professionals.

Study the forensic methodology and evidence handling procedures thoroughly.

• Primary
  CHFI Official Courseware
  EC-Council
  Official curriculum.

Networking, web application testing, host and network penetration testing, and assessment methodologies.

Career starters in penetration testing. Affordable, practical alternative to start before OSCP.

Complete the INE PTS (Penetration Testing Student) course. The exam is hands-on — practice on lab environments.

• Primary
  INE PTS Course Materials
  INE
  Free course content covering exam topics.

• INE Free Starter Pass — Free access to foundational courses.
• TryHackMe — Complementary hands-on practice.

Advanced penetration testing including pivoting, exploitation, post-exploitation, and professional reporting.

Penetration testers building toward OSCP-level skills. Good bridge certification.

Focus on pivoting and report writing. The report is a critical component of the exam.

• Primary
  INE PTP Course Materials
  INE
  Penetration Testing Professional course.

• INE Premium — Full course access with labs.

External reconnaissance, network pentesting, Active Directory attacks, report writing, and client debriefing.

Aspiring pentesters seeking affordable, practical certification. Unique live debrief component simulates real client interaction.

Complete TCM's PEH (Practical Ethical Hacking) course. The live debrief is unique — practice presenting findings verbally.

• Primary
  TCM PEH Course
  TCM Security
  Practical Ethical Hacking course — primary preparation.

• TCM Security Academy — Affordable course bundles including PEH, AD, and OSINT.
• HackTheBox / TryHackMe — Supplementary lab practice.

Security operations center concepts, security monitoring, host-based analysis, network intrusion analysis, and security policies.

Entry-level SOC analysts. Cisco-specific but broadly applicable SOC skills.

Cisco NetAcad offers free/low-cost courseware. Focus on security monitoring and analysis concepts.

• Primary
  Cisco CyberOps Associate CBROPS 200-201 Official Cert Guide
  Cisco Press
  Official certification guide.

• Cisco Networking Academy — Free courseware available.

Core exam (SCOR 350-701): network security, cloud security, content security, endpoint protection, secure network access, visibility and enforcement. Plus one concentration exam.

Network security engineers working with Cisco infrastructure.

Pass the core exam (SCOR) first, then choose a concentration. Heavy on Cisco-specific technologies.

• Primary
  CCNP Security SCOR 350-701 Official Cert Guide
  Cisco Press
  Official core exam guide.

Incident response, logging/monitoring, infrastructure security, identity/access management, and data protection on AWS.

Cloud security engineers and architects working in AWS environments.

Hands-on AWS experience is essential. Use AWS free tier for practice. Study IAM policies, KMS, CloudTrail, and GuardDuty in depth.

• Primary
  AWS Certified Security Study Guide: Specialty (SCS-C02)
  Sybex
  Comprehensive study guide.

• A Cloud Guru / Pluralsight — Video courses with labs.
• AWS Skill Builder — Official training and practice.

• Tutorials Dojo Practice Exams — Well-regarded AWS practice tests.

Identity/access management, platform protection, security operations, and data/application security in Azure.

Security engineers working in Azure environments.

Use Microsoft Learn free modules. Hands-on practice in Azure portal is essential. May include lab questions in the exam.

• Primary
  Exam Ref AZ-500
  Microsoft Press
  Official exam reference.

• Microsoft Learn — Free official learning paths.
• John Savill YouTube — Free Azure study crams.

• MeasureUp AZ-500 — Official Microsoft practice test provider.

IAM, org policies, network security, data protection, security operations, and compliance on Google Cloud.

Security engineers working in GCP environments.

Use Google Cloud Skills Boost for hands-on labs. Focus on VPC security, IAM, and security operations suite.

• Primary
  Official Google Cloud Certified Professional Cloud Security Engineer Study Guide
  Sybex
  Comprehensive study guide.

• Google Cloud Skills Boost — Official training with hands-on labs.