It is about how an organization is able to perform its primary functions and operations even in the face of natural or human-created situations.

This is about commercial organizations that may control any activity within their internal networks.

This talks about set of products, or no product, that will completely eliminate the chance of a security-related incident.

This covers consideration of which components are required and which are optional.

This deals with firewalls, access lists in routers, spam filters, virus filters, etc.

This deals with audit trails, log files, IDS, summary reports, etc.

This deals with email messages, visited sites, displays IP addresses, etc.

It is the measure of the secrecy of information

It ensures that the information is accurate and reliable

It deals with the ability of users to access the information

It refers to the controls that are included within systems and applications software in centralized and distributed environments and the steps used in their development

It addresses the principles, means, and methods of disguising information to ensure its integrity, confidentiality, and authenticity

This domain identifies the controls over hardware, media, and operations personnel with access privileges to any of these resources.

This domain spans the concepts, principles, structures, and standards used to design, implement, monitor, and secure operating systems, equipment, networks and applications.