Legal, Regulatory, Investigations, and Security Policy

Introduction

This lesson continues Domain 1, Security and Risk Management (16% of the exam, ISC2 exam outline effective 15 April 2024). Lesson 1 gave you ethics and governance. Here you learn the external rules the organization must obey (laws, regulations, contracts, industry standards), the way investigations are classified and conducted, and the internal documents (policies, standards, procedures, and guidelines) that turn those rules into daily behavior.