Operations security Telecommunications and network security Information security governance and risk management Software development security Cryptography Security architecture and design Access control Business continuity and disaster recovery planning Legal, regulations, investigations and compliance Physical (environmental) security