CISSP mnemonics: memorize the essentials
The CISSP is full of ordered lists to remember. Here are the most useful mnemonics, domain by domain, to anchor the essentials and earn precious points on exam day.
The OSI layers (Domain 4)
Bottom-up (1 → 7): "Please Do Not Throw Sausage Pizza Away"
Physical, Data link, Network, Transport, Session, Presentation, Application.
Top-down (7 → 1): "All People Seem To Need Data Processing".
The CIA triad and its opposite DAD (Domain 1)
CIA = Confidentiality, Integrity, Availability — the 3 security goals. Their opposite: DAD = Disclosure, Alteration, Destruction (the 3 types of compromise). Remember them as mirror images.
The 4 A's of access: IAAA (Domain 5)
IAAA = Identification (who I claim to be), Authentication (I prove it), Authorization (what I am allowed to do), Accountability (the audit trail). Always in that order.
Risk treatment (Domain 1)
4 possible responses: Mitigate, Accept, Transfer, Avoid. Mnemonic: think "MATA". Key reminder: you don't transfer accountability, only financial impact (insurance).
The ISC2 code of ethics canons (Domain 1)
The order is tested on the exam (in a conflict, the higher canon prevails):
- Protect society, the common good, public trust.
- Act honorably, honestly, legally.
- Provide diligent and competent service to principals.
- Advance and protect the profession.
Mnemonic: "PAPA" (Protect, Act, Provide, Advance).
Incident response phases (Domain 7)
Detect → Respond → Mitigate → Report → Recover → Remediate → Lessons learned. Follow the logic: you spot it, you contain it, you fix it, then you learn from it.
BCP / DRP: the continuity plan order (Domains 1 & 7)
Building the BCP: scope → BIA (business impact analysis) → identify controls → plan → test/maintain. BIA first: you only protect well what you've measured the criticality of (RTO/RPO).
How to use these mnemonics
- Tie them to the course: a lone mnemonic fades; linked to the concept, it sticks.
- Test them with quizzes: active recall burns memory in.
- Recite before the exam: turn them into a mental "brain dump" sheet.
Frequently asked questions
How do you memorize the OSI layers?
Bottom-up: "Please Do Not Throw Sausage Pizza Away". Top-down: "All People Seem To Need Data Processing".
What order are the ISC2 ethics canons?
Protect society, Act honorably, Provide diligent service, Advance the profession (PAPA). Order prevails in a conflict.
Anchor these mnemonics with the courses
Each domain has its summary, acronyms and exam pitfalls.
See also: the study plan and the exam explained.