CyberSec Study Notes | ISC² CC

• Compliance, ethics, and privacy fundamentals • Common attack types and threat actors #ISC2CC journey — let’s pass this together 💪 #StudyWithMe #CyberSec

Domain 1, Security Principles, covers: • Core concepts: • CIA triad: AAA (authentication, authorization, accounting) • Non-repudiation • Risk management basics (identify, assess, treat, monitor). • Governance, policies, standards, and procedures.

Hi guys, I'm back to prepare for the CC exam, even though I have less time to study. I'm still studying Domain 1: Security Principles. It accounts for 26% of the total exam points. This is a very important part of the exam because it has the highest weight.

From Grok: Subjects are active, objects are passive. A subject requests access to an object. A subject manipulates / acts upon an object. Access = flow of information from object → subject (or action performed on the object by the subject).

The recovery time objective ISC2 CC exam pocketprep.com/share/it/qotd?…

ISC2 CC exam daily question from ⁦⁦@pocketprep⁩ a physical security control, natural access control pocketprep.com/share/it/qotd?…

𝗜𝗦𝗔𝗖𝗔 Exams Materials👇🏽: •      𝗖𝗜𝗦𝗠: certpreps.com/exams/cism/ •      𝗖𝗜𝗦𝗔: certpreps.com/exams/cisa/ •      𝗖𝗥𝗜𝗦𝗖: certpreps.com/exams/crisc/ Cybersecurity Youtube channel: @cyber_racheal" target="_blank" rel="nofollow noopener">youtube.com/@cyber_racheal…. Subscribe.

CIA Triad Core model: Confidentiality + Integrity + Availability = foundation of information security. slideshare.net/slideshow/the-… youtu.be/fqnvzu-a5SA

Privacy Protecting personal data; collecting/using/storing/sharing it lawfully, respecting rights. (Data minimization, consent.) fortinet.com/resources/cybe… infosectrain.com/blog/certified…

Non-repudiation Ensuring a party cannot deny performing an action or sending a message. (Techniques: digital signatures, audit logs.) infosectrain.com/blog/certified…

Integrity Ensuring information is accurate, complete, and unaltered without authorization. (Techniques: hashing, digital signatures.) infosectrain.com/blog/certified… thecyberthrone.in/2025/07/27/cer… ISC2 CC exam CIA Triad

Confidentiality Ensuring information is only accessible to authorized people, processes, or systems. (Techniques: encryption, access control.) thecyberthrone.in/2025/07/27/cer… fortinet.com/resources/cybe… ISC2 CC exam CIA Triad

Authentication Verifying that a user or system is who it claims to be. (Factors: know/have/are; MFA uses 2+ factors.) isc2.org/certifications… firebrand.training/uk/courses/isc…

ISC2 CC exam OSI layer Pocket Prep pocketprep.com/share/it/qotd?…

security breach Free ISC2 CC training by Thor Pedersen - ThorTeaches.com thorteaches.com/qotd-cc/

key benefit of quality of service, Thor’s FREE Certified in Cybersecurity (CC) QOTD #12 thorteaches.com/cc-qotd/12/ ISC2

Kitchen horror, or a timeless classic of the Polish internet🤣 “Don’t buy this sourdough starter,” warns a man who simply wanted to prepare a traditional Polish dish for the Christmas table.

Merry Christmas 🎄 from Poland 🇵🇱!

Exam Prep Apps for Standardized Testing and Certifications - Pocket Prep pocketprep.com/share/it/qotd?… ISC2 CC exam security governance