Domains 1: Security & Risk Management 2: Asset Security 3: Security Architecture & Engineering 4: Communication & Network Security 5: Identity & Access Management 6: Security Assessment & Testing 7: Security Operations 8: Software Development Security