| Thema | Einzelheiten |
| Thema 1 | - Information Security Governance: This section of the exam delves into security management concepts and principles, examining organizational structures and roles in security. It also covers developing and implementing security policies, standards, and procedures.
|
| Thema 2 | - Regulatory Compliance and Legal Issues: This section addresses risk management and risk assessment methodologies, including threat modeling and vulnerability assessment. It also explores various risk mitigation strategies.
|
| Thema 3 | - Asset Security: This section focuses on information and asset classification, data security controls, privacy protection measures, and intellectual property protection.
|
| Thema 4 | - Security Architecture and Engineering: This section examines security models and design principles, system and application security, as well as cryptography and key management.
|
| Thema 5 | - Identity and Access Management: This section explores authentication methods and technologies, authorization and access control models, and the identity management lifecycle.
|
| Thema 6 | - Software Development Security: This section emphasizes securing the software development lifecycle, including application security testing, code review, secure coding practices, and third-party software management.
|