Free CISSP Flashcards: Interactive Study Cards for Every Domain
CISSP rests on a mountain of facts you have to recall instantly - security models, risk formulas, crypto use cases, access-control types, BCDR metrics. Flashcards are the fastest way to lock that foundation so your brain is free for the scenario reasoning on exam day. Below is a free interactive deck you can flip, shuffle, and self-test with right now - then a way to build your own cards from the questions you actually get wrong.
Sample CISSP flashcards (interactive version loads with JavaScript):
- Bell-LaPadula - rules? Protects confidentiality: Simple Security = no read up; Star (*) = no write down.
- Biba - rules? Protects integrity: Simple Integrity = no read down; Star = no write up.
- Clark-Wilson? Commercial integrity via well-formed transactions and separation of duties; access = subject → transformation procedure → CDI (the access control triple).
- ALE formula? ALE = SLE × ARO, where SLE = AV × EF.
- "Once every 5 years" = what ARO? 0.2 (that is 1/5).
- When is a safeguard justified? When (ALE before − ALE after) is greater than the annual cost of the control.
- Opposite of the CIA triad? DAD: Disclosure, Alteration, Destruction.
- Symmetric vs asymmetric crypto? Symmetric = fast, bulk encryption, shared key (AES). Asymmetric = key exchange and digital signatures, no pre-shared secret (RSA/ECC).
- RTO vs RPO? RTO = max tolerable downtime (time to recover). RPO = max tolerable data loss (the point in time you can restore to).
- MAC vs DAC vs RBAC? MAC = labels/clearances, system-enforced. DAC = owner grants access. RBAC = access by job role.
- Kerberos - what does the KDC issue? A TGT (from the AS), then service tickets (from the TGS); symmetric keys, time-sensitive tickets.
- Data owner vs data custodian? Owner sets classification and policy (accountable); custodian implements and maintains the controls day to day.
The best CISSP cards are the ones you make yourself
Take a full-length CISSP practice exam free. Every question has an Explanation and an Exam Tip - highlight any of it and it becomes a study card you can review with spaced repetition. Create an account on the next screen and the code auto-applies.
CISSP-EXAM-FULL
Start free & build cards
Already have an account? Log in to start
Why build your own cards instead of downloading a deck
Generic decks make you review hundreds of cards you already know to find the handful you don't. The cards that actually move your score are the ones tied to concepts you missed. That's the whole idea behind FigigExams' study cards:
- Made from real explanations. During or after a practice exam, highlight any part of an Explanation or Exam Tip and save it as a card - so every card is anchored to a specific question and concept.
- Spaced repetition built in. Cards you find hard come back sooner; cards you've mastered fade out. You spend your time where it counts.
- Mastery tracking. See totals, mastered, and due-today at a glance, and drill from a focused board view.
- Synced everywhere. Your deck follows you across devices - study on a laptop, review on your phone.
How it works
- Start a free CISSP practice exam - the code above auto-applies after sign-up.
- Highlight what you want to remember in any Explanation or Exam Tip; it becomes a two-sided card.
- Review on your schedule from the My Cards page - flip, rate, and let spaced repetition surface the ones you keep missing.
Frequently Asked Questions
Are these CISSP flashcards free?
Yes. The interactive sample deck above is completely free to flip, shuffle, and self-test with - no account, no credit card. To build and save your own cards from real exam explanations with spaced repetition, create a free account; a paid pack ($18) unlocks unlimited cards.
What is the best way to use flashcards for CISSP?
Use them for the memorization-heavy pieces - security models, risk formulas, crypto use cases, access-control types, BCDR metrics. The most effective cards are the ones you make from questions you actually got wrong, reviewed on a spaced-repetition schedule so the hard ones come back more often.
Do flashcards work for a scenario-based exam like CISSP?
Cards can't teach judgment, but CISSP still rests on a large base of facts you must recall instantly. Locking that foundation frees your working memory for the scenario reasoning. Pair flashcards (recall) with full practice exams (judgment).
How is this different from Quizlet or Anki?
Where the cards come from. Instead of a generic static deck, FigigExams turns the actual explanations and exam tips from your practice exams into cards - each tied to a concept you personally missed, with spaced repetition and mastery tracking built in. The deck above is a free sample of that experience.