Sec+ Domains 1-5

Enforces CIA - Apples to the configurations of networking systems.

Ex> Firewall rules, IPS/IDS, Encryption.

Applies to oversight in terms of risk management mechanisms.

Example > risk assessments, security planning exercises.

Applies with day to day function, making sure the mission is carrying out.

Example > Log monitoring, data backups, vulnerability management.

Applies to physical security for facilities/assets.

Example > Building locks, perimeter lighting, fences, burglar alarms, fire suppression systems.

The goal is to prevent an exploit from happening, hence the name.

Example > Firewall and Encryption

The goal is to sway the threat actor from carrying out an attack.

Example > Vicious guard dogs, bright flood lights, barbed wire fences, those laser-filled rooms you see in spy movies….

The goal is to detect when an event/incident is/has happened.

Example > Intrusion Detection System spots malware activity on a network and alerts the admin.

The goal is to make corrective actions or restore from an attack.

Example > Restoring to data backups after a ransomeware attack.

The goal is to mitigate risk associated with exceptions made to a policy.

Example > If Multi-factor Auth.. is not currently mandated on the network, maybe we can COMPENSATE by adding stricter password policies.

The goal is to inform employees and others what they should do achieve security objectives.

Example > Policies, SOP (standard Operating Procedure), or a STIG mandated from DISA.