Domain mind maps, one printable sheet per exam domain

Dense revision posters: numbered concept cards, the orderings and formulas the exam asks for, and the traps it sets. Download as PNG or print.

CISSP: 8 sheets
- Domain 1: Security and Risk Management
- Domain 2: Asset Security
- Domain 3: Security Architecture and Engineering
- Domain 4: Communication and Network Security
- Domain 5: Identity and Access Management
- Domain 6: Security Assessment and Testing
- Domain 7: Security Operations
- Domain 8: Software Development Security
CISA: 5 sheets
- Domain 1: Information Systems Auditing Process
- Domain 2: Governance and Management of IT
- Domain 3: Information Systems Acquisition, Development and Implementation
- Domain 4: Information Systems Operations and Business Resilience
- Domain 5: Protection of Information Assets
CISM: 4 sheets
- Domain 1: Information Security Governance
- Domain 2: Information Security Risk Management
- Domain 3: Information Security Program
- Domain 4: Incident Management
CRISC: 4 sheets
- Domain 1: Governance
- Domain 2: IT Risk Assessment
- Domain 3: Risk Response and Reporting
- Domain 4: Information Technology and Security
CCSP: 6 sheets
- Domain 1: Cloud Concepts, Architecture and Design
- Domain 2: Cloud Data Security
- Domain 3: Cloud Platform and Infrastructure Security
- Domain 4: Cloud Application Security
- Domain 5: Cloud Security Operations
- Domain 6: Legal, Risk and Compliance
CGRC: 7 sheets
- Domain 1: Security and Privacy Governance, Risk Management and Compliance Program
- Domain 2: Scope of the System
- Domain 3: Selection and Approval of Framework, Security and Privacy Controls
- Domain 4: Implementation of Security and Privacy Controls
- Domain 5: Assessment and Audit of Security and Privacy Controls
- Domain 6: System Compliance
- Domain 7: Compliance Maintenance
CDPSE: 4 sheets
- Domain 1: Privacy Governance
- Domain 2: Privacy Risk Management and Compliance
- Domain 3: Data Life Cycle
- Domain 4: Privacy Engineering
AIGP: 4 sheets
- Domain 1: AI Governance
- Domain 2: Risk and Compliance for AI
- Domain 3: AI Development and Lifecycle
- Domain 4: AI Ethics and Responsible AI
AAISM: 9 sheets
- ISO/IEC 42001 Clause 6.2: Policy vs Objective vs KPI vs Target
- Topic 1: AI Threat Landscape
- Topic 2: AI Model Security
- Topic 3: AI Data Security
- Topic 4: AI Governance Frameworks
- Topic 5: AI Infrastructure Security
- Topic 6: AI Supply Chain
- Topic 7: AI Incident Response
- Topic 8: AI Risk Assessment
GDPR: 6 sheets
- Domain 1: Principles & Lawful Basis
- Domain 2: Data Subject Rights
- Domain 3: Controller & Processor Obligations
- Domain 4: International Data Transfers
- Domain 5: Enforcement & Penalties
- Domain 6: Data Protection by Design & Default
HIPAA: 5 sheets
- Domain 1: HIPAA Privacy Rule
- Domain 2: HIPAA Security Rule
- Domain 3: Administrative Safeguards
- Domain 4: Technical & Physical Safeguards
- Domain 5: Breach Notification & Enforcement
CIPP/E: 3 sheets
- Domain 1: European Data Protection Law
- Domain 2: European Data Protection Regulation
- Domain 3: Compliance
SC-100: 4 sheets
- Domain 1: Design solutions that align with security best practices and priorities
- Domain 2: Design security operations, identity, and compliance capabilities
- Domain 3: Design security solutions for infrastructure
- Domain 4: Design security solutions for applications and data
ISO 27001: 5 sheets
- Domain 1: ISMS Planning and Context
- Domain 2: Leadership and Support
- Domain 3: Risk Assessment and Treatment
- Domain 4: Annex A Controls
- Domain 5: Performance Evaluation and Improvement
ISO 27001 Lead Auditor: 6 sheets
- Domain 1: ISMS Foundations
- Domain 2: Audit Principles and Auditor Competence
- Domain 3: Audit Program and Planning
- Domain 4: Conducting the Audit
- Domain 5: Findings, Nonconformity and Corrective Action
- Domain 6: Certification Lifecycle and Accreditation
NIST CSF: 6 sheets
- Domain 1: Identify
- Domain 2: Protect
- Domain 3: Detect
- Domain 4: Respond
- Domain 5: Recover
- Domain 6: Govern
PCI DSS: 6 sheets
- Domain 1: Build and Maintain a Secure Network
- Domain 2: Protect Cardholder Data
- Domain 3: Vulnerability Management
- Domain 4: Access Control Measures
- Domain 5: Monitoring and Testing
- Domain 6: Security Policy
AICP: 3 sheets
- Domain 1: AI Fundamentals & Ethics
- Domain 2: AI Compliance Frameworks
- Domain 3: AI Risk Management
CLLMSP: 8 sheets
- Domain 1: LLM Foundations & Transformer Internals
- Domain 2: OWASP Top 10 for LLM Applications
- Domain 3: Prompt Injection & Jailbreak Defense
- Domain 4: MCP, Tool & Plugin Security
- Domain 5: AI Agent Hardening
- Domain 6: LLM Data Protection & Privacy
- Domain 7: LLM Security Governance & Compliance
- Domain 8: LLM Red Teaming & Incident Response
CCSK: 8 sheets
- Domain 1: Cloud Computing Concepts and Architectures
- Domain 2: Cloud Governance and Organization Management
- Domain 3: Risk, Audit and Compliance
- Domain 4: Infrastructure, Networking and Cloud Workload Security
- Domain 5: Data Security
- Domain 6: Identity and Access Management
- Domain 7: Security Monitoring, Incident Response and Resilience
- Domain 8: Related Technologies and Strategies
AZ-500: 4 sheets
- Domain 1: Manage Identity and Access
- Domain 2: Secure Networking
- Domain 3: Secure Compute, Storage and Databases
- Domain 4: Manage Security Operations
AWS Security: 6 sheets
- Domain 1: Detection
- Domain 2: Incident Response
- Domain 3: Infrastructure Security
- Domain 4: Identity and Access Management
- Domain 5: Data Protection
- Domain 6: Security Foundations and Governance
GCP Security: 5 sheets
- Domain 1: Configuring Access
- Domain 2: Securing Communications and Establishing Boundary Protection
- Domain 3: Ensuring Data Protection
- Domain 4: Managing Operations
- Domain 5: Supporting Compliance Requirements
AWS SAA: 4 sheets
- Domain 1: Design Secure Architectures
- Domain 2: Design Resilient Architectures
- Domain 3: Design High-Performing Architectures
- Domain 4: Design Cost-Optimized Architectures
GCFA: 4 sheets
- Domain 1: Advanced Incident Response
- Domain 2: Memory Forensics
- Domain 3: Timeline Analysis
- Domain 4: Anti-Forensics Detection
GNFA: 4 sheets
- Domain 1: Network Architecture & Monitoring
- Domain 2: Network Protocol Analysis
- Domain 3: Open Source Network Forensics
- Domain 4: Commercial Network Forensics
CHFI: 4 sheets
- Domain 1: Forensic Science, Regulations, Policies and Ethics
- Domain 2: Digital Evidence
- Domain 3: Procedures, Methodology and Forensic Tools
- Domain 4: Digital Forensics
EnCE: 8 sheets
- Domain 1: Forensic Methodology and Evidence Handling
- Domain 2: Evidence Acquisition and Imaging
- Domain 3: File Systems
- Domain 4: Data Recovery
- Domain 5: Registry and System Artifacts
- Domain 6: User Artifacts
- Domain 7: Communication Artifacts
- Domain 8: Reporting, Testimony and Legal Process
GREM: 4 sheets
- Domain 1: Malware Analysis Fundamentals
- Domain 2: Reversing Malicious Code
- Domain 3: Malicious Document Analysis
- Domain 4: In-Depth Malware Analysis
Security+: 5 sheets
- Domain 1: General Security Concepts
- Domain 2: Threats, Vulnerabilities and Mitigations
- Domain 3: Security Architecture
- Domain 4: Security Operations
- Domain 5: Security Program Management and Oversight
CC: 5 sheets
- Domain 1: Security Principles
- Domain 2: Business Continuity, Disaster Recovery and Incident Response
- Domain 3: Access Controls Concepts
- Domain 4: Network Security
- Domain 5: Security Operations
CySA+: 4 sheets
- Domain 1: Security Operations
- Domain 2: Vulnerability Management
- Domain 3: Incident Response and Management
- Domain 4: Reporting and Communication
SSCP: 7 sheets
- Domain 1: Security Concepts and Practices
- Domain 2: Access Controls
- Domain 3: Risk Identification, Monitoring and Analysis
- Domain 4: Incident Response and Recovery
- Domain 5: Cryptography
- Domain 6: Network and Communications Security
- Domain 7: Systems and Application Security
SecurityX (CASP+): 4 sheets
- Domain 1: Governance, Risk & Compliance
- Domain 2: Security Architecture
- Domain 3: Security Engineering
- Domain 4: Security Operations

Cybersecurity Mindmaps

Interactive visual learning diagrams, original to CyberCertPrep and built from public frameworks (NIST, ISO/IEC, MITRE ATT&CK).

Security Domains

Core cybersecurity domains and specializations