| 🏠 Back to Exam Syllabus | 📺 RooCloud on YouTube | 🌐 RooCloud Practice Exams |
CISSP 4.1 - Categories of Laws
This episode of the ISC2 Certified Information Systems Security Professional (CISSP) exam prep series maps the legal system that sits under every security decision, part of Domain 1. It walks through the categories of law a practitioner must recognize, why the distinction shapes who acts after an incident, and where the ultimate limits on all of these rules come from.
What this episode covers
- Why categories of law matter — the category decides who acts, what evidence you need, and what penalties apply.
- Overlapping jurisdictions — reconciling rules from multiple governments, and knowing when to call an attorney.
- Criminal law — the government prosecutes serious wrongs, with penalties from fines up to prison.
- Civil law — the wronged party files suit over contracts, employment, and property; damages, not prison.
- Administrative law — agency regulations, policies, and orders that carry the force of law without a fresh vote.
- The constitution on top — judicial review can strike down any law that violates the supreme authority.
Watch the full episode above for the worked examples and detailed explanations of each concept.
Frequently Asked Questions
Why should a security professional care about categories of law?
Security work does not happen in a vacuum — governments at every level pass overlapping rules that touch your systems, and professionals must reconcile the demands of several jurisdictions at once. You do not need to be an attorney, but you do need to recognize which type of law you are dealing with, and when to call someone who is.
What is criminal law?
Criminal law is the body of rules that keeps society safe and orderly. It forbids serious acts against people and property, the police enforce it, and the government itself brings the case against the accused. Penalties are the heaviest of any category, ranging from community service and fines all the way to prison.
What is civil law?
Civil law is the framework that lets an orderly society and its businesses function. It handles disputes that are not crimes but still need a neutral judge, like contract fights, employment matters, and property deals. The government does not take sides — the wronged party hires counsel and files the suit. There is no prison at the end of a civil loss, but damage awards can reach into the millions.
What is administrative law?
Administrative law is the detailed rulemaking that government agencies create to run their day-to-day operations. Lawmakers cannot spell out every procedure for every situation, so they grant agencies room to fill in the gaps through regulations, policies, and orders. These carry the force of law without a fresh vote from the legislature.
What keeps all of these laws in check?
A single supreme authority sits above them all: the constitution. Every criminal, civil, and administrative rule must obey it, and courts review laws for constitutional problems, with appeals rising all the way to the highest court. If a law violates that supreme authority, a court can strike it down, and administrative rules face an extra limit — they can never contradict the criminal and civil laws already on the books.
📚 Master the ISC2 CISSP Exam!
Ready to test your knowledge? Access chapter-specific Multiple Choice Questions (MCQs) and full-length practice exams for the ISC2 CISSP certification at RooCloud.com. Solve the chapter-wise questions to reinforce this lesson before moving to the next episode.
Reference: This article is based on concepts discussed in CISSP 4.1 - Categories of Laws.