Domain 1 - Information Security Governance
Establish and maintain a framework to provide assurance that information security strategies are aligned with business objectives and consistent with applicable laws and regulations.

Domain 2 - Information Risk Management
Identify and manage information security risks to achieve business objectives.

Domain 3 - Information Security Program Development
Create and maintain a program to implement the information security strategy.

Domain 4 - Information Security Program Management
Oversee and direct information security activities to execute the information security program.

Domain 5 - Incident Management & Response
Plan, develop and manage a capability to detect, respond to and recover from information security incidents.