What this domain covers
This domain groups 1 objectives: Apply governance, risk, compliance, ethics, policy, and continuity principles..
CISSP domain
Security and Risk Management
Study the Security and Risk Management blueprint area in the context of 2024 exam outline.CertificationCISSP
ProviderISC2
Blueprint weight16%
Exam standard2024 exam outline
Why this domain matters
The Security and Risk Management domain represents a distinct part of the CISSP role blueprint. It should be understood in relation to the other domains because exam scenarios can require knowledge from more than one area.
How to prepare
Begin with the objective statements below, review each listed subtopic in the provider material, and practice applying the concepts to realistic decisions. Track uncertain answers as well as incorrect ones before moving into timed simulation.
- Interpret the published objectives for Security and Risk Management.
- Apply Security and Risk Management knowledge in certification-aligned scenarios.
Apply governance, risk, compliance, ethics, policy, and continuity principles.
Prepare to work with Interpret the published objectives for Security and Risk Management.; Apply Security and Risk Management knowledge in certification-aligned scenarios..
Continue through the full blueprint.
Review every domain before moving from targeted practice into timed simulation.