🏠 Home

CISSP Domain 1 — Security and Risk Management

1.9: Understand and Apply Risk Management Concepts

This section includes key risk management concepts required for CISSP success. Select a topic below to explore further details, MCQs, and flashcards.

Threat and Vulnerability Identification Risk Analysis, Assessment, and Scope Risk Response and Treatment (Cybersecurity Insurance) Applicable Types of Controls (Preventive, Detection, Corrective) Control Assessments (Security & Privacy) Continuous Monitoring and Measurement Reporting (Internal & External) Continuous Improvement (Risk Maturity Modeling) Risk Frameworks (ISO, NIST, COBIT, SABSA, PCI)