Our purpose

About Mind Over Memory

Mind Over Memory was created by CISSP-certified security professionals to give candidates a more thoughtful and effective way to prepare for the CISSP exam.

The CISSP body of knowledge is famously described as “a mile wide and an inch deep.” Faced with that breadth, candidates can easily fall into the trap of trying to memorize thousands of terms, ports, frameworks, and definitions. But the CISSP exam is not simply a test of technical recall. It evaluates how well candidates apply security knowledge, assess risk, and make sound decisions from a management perspective.

Good judgment still requires a strong foundation. Candidates must understand the underlying security concepts before they can apply them confidently to realistic situations. Mind Over Memory supports both sides of that challenge: building essential knowledge and developing the judgment required to use it.

A familiar piece of advice given to CISSP candidates is to “think like a manager.” That principle is central to our platform and to our name. Success requires more than remembering information. It requires knowing how to reason through a situation, evaluate competing priorities, and choose the best course of action.

It requires mind over memory.

We hope Mind Over Memory becomes a valuable part of your preparation. We look forward to supporting you on your journey toward certification and hearing how we can continue to improve the experience.

The people behind the platform

The Editorial Team

Mind Over Memory combines security leadership, technical depth, and practical experience from professionals who understand what the CISSP exam is designed to assess.

Founder and editorial contributor

Paul CISSP

For over 30 years, Paul has led enterprise technology, cybersecurity, and digital transformation for companies in the financial services industry. He prides himself on delivering practical, cost-effective outcomes, reducing technology risk, modernizing aging systems, improving collaboration, strengthening cybersecurity, and building roadmaps that leadership can actually understand and execute. Based in Montreal, Canada, he works with organizations locally and globally, bringing a calm, business-first approach to technology decisions.

Editorial contributor

Rob CISSP, OSWP, PEN-100, OSCP

Rob is the Global Head of Security Architecture at a large private equity firm based in London, England. He is responsible for Security Architecture, Security Operations, and Application Security across a multi-entity international group of diverse companies. Over the last decade, he has built and led security functions across financial services and media, with a consistent focus on delivering measurable risk reduction through lean, empowered teams.

Editorial contributor

Stephen CISSP, CCSK v4

With over a decade of IT and information security experience, Stephen brings proven expertise in safeguarding global enterprise environments. He has led critical governance, risk, and compliance initiatives across international markets, including PCI DSS compliance, risk assessments, and complex penetration testing. A strategic technical advisor, Stephen has also led high-impact enterprise transformations, including large-scale cloud migrations, data center relocations, and GDPR compliance programs. Based in Ireland, he is known for driving resilient, forward-looking security strategies.