CISSP Security Domains Overview

The process of verifying a user's identity.

The process of determining what a user is allowed to access after their identity is verified.

The process of monitoring and recording user actions to ensure systems and data are used properly.

Testing security controls to identify weaknesses and improve security measures.

The process of analyzing security data to identify threats, risks, and vulnerabilities.

A formal examination of security controls to ensure they are effective and meet organizational goals.

The process of investigating security incidents, mitigating risks, and implementing preventive measures.

Investigating a security breach to determine how it occurred and what needs to be done to prevent future attacks.

A security principle where everyone in an organization takes responsibility for protecting its assets and data, both physically and virtually.

A security practice that limits user access to only the resources they require to perform their job.

A security strategy that implements multiple layers of defense to protect against attacks.

A system that fails in a way that minimizes damage or disruption.

A security practice where different tasks are assigned to different individuals to prevent fraud or errors.

The concept of designing systems that are as simple as possible to reduce complexity and security risks.

A security approach that assumes no user or device can be trusted by default and requires strict verification for every access attempt.

A security principle that involves verifying the identity of users and devices before granting access to resources.

Involves implementing various strategies and tools to identify, prevent, and respond to cyber threats.

Enhancing awareness of cybersecurity risks and best practices among employees.

Documenting and analyzing suspicious activities or security events.

Systems that monitor network traffic and identify potential intrusions.

Tools that aggregate and analyze security logs from various sources for threat detection.

Collecting, managing, and analyzing logs from different systems to identify security events.

A structured process for dealing with cybersecurity incidents, from detection to resolution.

Step-by-step instructions for handling specific cybersecurity incidents.

Information that's not available to the public, and if compromised, could cause some damage to an organization's finances, reputation, or ongoing operations.

Information that holds no real risk for an organization if it's compromised.

Information that's protected by laws or regulations, and if compromised, could severely hurt an organization's finances, reputation, and ongoing operations.

A weakness that can be exploited by a threat, leading to a security risk.

A malicious attack where threat actors encrypt an organization's data and then demand payment to restore access.

A password that unlocks data encrypted by ransomware.

An online marketplace where cybercriminals communicate and trade stolen data and malicious tools.

An individual's actions can significantly impact an organization's internal network security, making it important for all users to be security-conscious.

The most visible part of the internet, accessible through standard web browsers. It includes websites, social media, news articles, online shopping, and other publicly available content.

The potential for harm or loss to an organization's assets, reputation, or operations due to cybersecurity threats.

The direct consequences experienced by an organization after a successful cyberattack. This can include financial losses, operational disruption, and reputational damage.

The risk of unauthorized access, disclosure, or misuse of sensitive information like personal data (PII), leading to identity theft, fraud, and reputational damage.

The negative impact on an organization's reputation due to a cyberattack. This can lead to loss of customer trust, reduced business opportunities, and decreased brand value.

The process of having the right procedures and rules in place to quickly reduce the impact of a risk like a breach.

The second step of the NIST RMF that is used to develop risk management processes and tasks.

The sixth step of the NIST RMF that refers to being accountable for the security and privacy risks that may exist in an organization.

The seventh step of the NIST RMF that means be aware of how systems are operating.

Anything that can impact the confidentiality, integrity, or availability of an asset.

The fifth step of the NIST RMF that means to determine if established controls are implemented correctly.

An organization's ability to maintain their everyday productivity by establishing risk disaster recovery plans.