Governance, Risk and Compliance

This domain covers organizational risk management and compliance to regulations, such as PCI-DSS, SOX, HIPAA, GDPR, FISMA, NIST, and CCPA.

1. Compare and contrast various types of controls

2. Importance of applicable regulations, standards, or frameworks that impact organizational security posture

3. Explain the importance of policies to organizational security

4. Summarize risk management processes and concepts

5. Explain privacy and sensitive data concepts in relation to security