This CISSP Domain consists out of the following areas:

  • Security
  • Risk
  • Compliance
  • Law
  • Regulations
  • Business Continuity

Services that are placed in this domain are related to the following subjects:

  • Confidentiality, integrity, and availability concepts 
  • Security governance principles
  • Compliance
  • Legal and regulatory issues
  • Professional ethic
  • Security policies, standards, procedures and guidelines