ISC2 CISSP Certified Information Systems Security Professional Official Practice Tests, 4th Edition

Chapter 1Security and Risk Management (Domain 1)

SUBDOMAINS

• 1.1 Understand, adhere to, and promote professional ethics
• 1.2 Understand and apply security concepts
• 1.3 Evaluate, apply, and sustain security governance principles
• 1.4 Understand legal, regulatory, and compliance issues that pertain to information security in a holistic context
• 1.5 Understand requirements for investigation types (i.e., administrative, criminal, civil, regulatory, industry standards)
• 1.6 Develop, document, and implement security policy, standards, procedures, and guidelines
• 1.7 Identify, analyze, assess, prioritize, and implement Business Continuity (BC) requirements
• 1.8 Contribute to and enforce personnel security policies and procedures
• 1.9 Understand and apply ...