domain 1. Access control -- domain 2. Telecommunications and network security -- domain 3. Information security and risk management -- domain 4. Application security -- domain 5. Cryptography -- domain 6. Security architecture and design -- domain 7. Operations security -- domain 8. Business continuity planning and disaster recovery planning -- domain 9. Legal, regulations, compliance, and investigation -- domain 10. Physical security