| Domain 1 | Security Management Practices |
| Domain 2 | Security Architecture and Models |
| Domain 3 | Access Control |
| Domain 4 | Applications and Systems Development |
| Domain 5 | Operations Security |
| Domain 6 | Physical Security |
| Domain 7 | Cryptography |
| Domain 8 | Telecommunications and Networking |
| Domain 9 | Business Continuity and Disaster Recovery |
| Domain 10 | Law, Investigation and Ethics |