CISSP Domain 3 — Architecture and Engineering

3.1 Research, Implement, and Manage Engineering Processes using Secure Design Principles

Establishing secure engineering processes ensures that protection is baked into the system architecture rather than added as an afterthought.

• » Threat modeling
• » Least privilege
• » Defense in depth
• » Secure defaults
• » Keep it simple and small
• » Zero trust or trust but verify
• » Privacy by design
• » Shared responsibility
• » Secure access service edge (SASE)
• » Fail securely
• » Segregation of Duties (SoD)