domain 1. Access control -- domain 2. Security network architecture & design -- domain 3. Information security governance & risk management -- domain 4. Software development security -- domain 5. Cryptography -- domain 6. Security architecture & design -- domain 7. Security operations -- domain 8. Business continuity & disaster recovery planning -- domain 9. Legal, regulations, investigations, and compliance -- domain 10. Physical (environmental) security.