Information security and risk management -- Access controls -- Software development security -- Business continuity and disaster recovery planning -- Cryptography -- Legal, regulations, investigations, and compliance -- Security operations -- Physical and environmental security -- Security architecture and design -- Telecommunications and network security.