1. Access control -- 2. Telecommunications and network security -- 3. Information security and risk management -- 4. Application security -- 5. Cryptography -- 6. Security architecture and design -- 7. Operations security -- 8. Business continuity planning and disaster recovery planning -- 9. Law, regularions, compliance, and investigation -- 10. Physical security.