Certified in Cybersecurity Part 1 with Chris Nelson

Domain 1 of the ISC2 Certified in Cybersecurity (CC) certification is:

This domain establishes the foundational knowledge of information security and introduces the core principles that underpin the cybersecurity field.

1. Confidentiality, Integrity, and Availability (CIA Triad):

   • Confidentiality: Ensuring only authorized individuals access data.

   • Integrity: Maintaining data accuracy and trustworthiness.

   • Availability: Ensuring systems and data are accessible when needed.

2. Security Concepts:

   • Least privilege

   • Need to know

   • Defense in depth

   • Separation of duties

   • Due care vs. due diligence

3. Risk Management Concepts:

   • Threats, vulnerabilities, and risk

   • Likelihood and impact

   • Risk response strategies (accept, avoid, transfer, mitigate)

4. Security Controls:

   • Types: Administrative, Technical, Physical

   • Control functions: Preventive, Detective, Corrective

5. Cybersecurity Roles and Responsibilities:

   • Stakeholders in security (e.g., users, administrators, executives)

   • Accountability and governance

   • Role of the cybersecurity professional

6. Security Frameworks and Standards:

   • NIST, ISO/IEC 27001, COBIT (high-level overview)

7. Ethics and Professional Conduct:

   • ISC2 Code of Ethics

   • Legal and regulatory compliance basics

• Understand the fundamental principles that guide cybersecurity efforts.

• Identify basic risk factors and select appropriate control types.

• Recognize ethical expectations and legal considerations.

• Communicate key security concepts to technical and non-technical stakeholders.

Domain 1: Security Principles🔍 Key Topics in Domain 1:✅ What You Should Be Able to Do After This Domain: