Understand and Apply Security Concepts
Evaluate and Apply Security Governance Principles
Legal and Regulatory Issues that Pertain to Information Security in a Global Context
Requirements for Investigation Types
Develop, Document and Implement Security Policy, Standards, Procedures and Guidelines
Identify, Analyse and Prioritise Business Continuity (BC) Requirements
Contribute to and Enforce Personnel Security Policies and Procedures
Understand and Apply Risk Management Concepts
Understand and Apply Threat Modelling Concepts and Methodologies
Apply Supply Chain Risk Management (SCRM) Concepts
Establish and Maintain a Security Awareness, Education and Training Programme

Identify and Classify Information and Assets
Establish Information and Asset Handling Requirements
Provision Resources Securely
Manage Data Lifecycle
Ensure Appropriate Asset Retention
Determine Data Security Controls and Compliance Requirements

Research, Implement and Manage Engineering Processes Using Secure Design Principles
Understand the Fundamental Concepts of Security Models
Select Controls Based Upon Systems Security Requirements
Understand Security Capabilities of Information Systems
Assess and Mitigate the Vulnerabilities of Security Architectures, Designs and Solution Elements
Cryptographic Life Cycle
Understand Methods of Cryptanalytic Attacks
Apply Security Principles to Site and Facility Design
Design Site and Facility Security Controls
Manage the information system life-cycle

Implement Secure Design Principles in Network Architectures
Secure Network Components
Implement Secure Communication Channels According to Design

Control Physical and Logical Access to Assets
Manage Identification and Authentication of People, Devices and Services
Integrate Identity as a Third-Party Service
Implement and Manage Authorisation Mechanisms
Manage the Identity and Access Provisioning Lifecycle
Implement Authentication Systems

Design and Validate Assessment, Test and Audit Strategies
Conduct Security Control Testing
Collect Security Process Data
Analyse Test Output and Generate Report
Conduct or Facilitate Security Audits

Understand and Support Investigations
Conduct Logging and Monitoring Activities
Securely Provisioning Resources
Understand and Apply Foundational Security Operations Concepts
Apply Resource Protection Techniques
Conduct Incident Management
Operate and Maintain Detective and Preventative Measures
Implement and Support Patch and Vulnerability Management
Participate in Change Management Processes
Implement Recovery Strategies
Implement Disaster Recovery (DR) Processes
Test Disaster Recovery Plans (DRP)
Participate in Business Continuity (BC) Planning and Exercises
Implement and Manage Physical Security
Address Personnel Safety and Security Concerns

Integrate Security in the Software Development Life Cycle (SDLC)
Identify and Apply Security Controls in Development Environments
Assess the Effectiveness of Software Security
Assess Security Impact of Acquired Software
Define and Apply Secure Coding Guidelines and Standards