chapter Information Security and Risk Management -- chapter Access Control -- chapter Cryptography -- chapter Physical (Environmental) Security -- chapter Security Architecture and Design -- chapter Business Continuity and Disaster Recovery Planning -- chapter Telecommunications and Network Security -- chapter Application Security -- chapter Operations Security -- chapter Legal, Regulations, Compliance and Investigations -- chapter Appendix A Answers to Sample Questions -- chapter Certified Information Systems Security Professional (CISSP Candidate Information Bulletin.