Secure Design Principles, Security Models, and System Capabilities

Introduction

This lesson opens Domain 3, Security Architecture and Engineering (13% of the exam, ISC2 exam outline effective 15 April 2024). It covers the first tasks of the domain: researching, implementing, and managing engineering processes using secure design principles (3.1), understanding the fundamental concepts of security models (3.2), selecting controls based on system security requirements (3.3), and understanding the security capabilities of information systems (3.4).