Start Here: AI Security, CISSP, and Building Security Capability

Welcome.

I’m Jeff Moore, a security practitioner, educator, and builder. Over the last 25+ years, I’ve worked across technology and security leadership roles, and today I write about security architecture, AI security, risk management, certification preparation, and the practical realities of defending modern systems.

People typically subscribe for one of three reasons:

Path 1: You’re Studying for CISSP

If you’re preparing for the CISSP exam, start here.

You’ll find content on:

• CISSP study strategies

• Domain-specific guidance

• Practice questions and exam preparation

• Security architecture fundamentals

• Common mistakes candidates make

Recommended reading:

• How difficult is the CISSP exam?

• Strategy Guide for Answering Difficult Questions

• AI Security for the CISSP: What’s Changed and How to Prepare

• CISSP CBK Explainer

• Security Control Frameworks Explained

Path 2: You’re Already a Security Professional

Many readers already hold certifications and work in security, engineering, architecture, governance, risk, compliance, or leadership roles.

Topics include:

• Security architecture and governance in the age of AI

• Cloud security

• Risk management

• Security leadership

• AppSec and development

• Security Credentials

Recommended reading:

• Strap In (with harness engineering)

• MITRE ATLAS: The AI Threat Framework Every Security Leader Needs to Know

• ISACA’s AAISM: The First AI Security Management Certification, Examined

• The CISSP Holder’s Guide to AI Security Credentials

• Inside the NIST AI Risk Management Framework

Path 3: You’re Exploring Security

AI is rapidly changing how organizations build, operate, and defend systems.

Here you’ll find content covering:

• Overviews of specific security topics, including governance and risk management

• Security & risk management frameworks

• Security implications of AI adoption (including AI-driven dev, supply chain, and model security)

Recommended reading:

• Guide to Security Governance

• NIST AI RMF or ISO 42001?

• Six Things Adversaries Are Doing With AI

• Inside the NIST AI Risk Management Framework

• Exploring Claude Code and AI-Driven Development

What I’m Building

In addition to writing, I’m currently building the Academy, an AI-powered learning platform for CISSP candidates and security professionals.

As founding members, participants receive access to my new CISSP book, available exclusively on the platform as an interactive learning experience.

You’ll also receive 30 days of Pro access and an opportunity to help shape the platform through direct feedback.

If that sounds interesting, learn more here.

Say Hello

One thing I enjoy most about this platform is meeting other people in the field.

Hit reply and tell me:

• What brought you here

• What you do

• What you’re working on

• What you’d like to learn next

I read every response.