The Official (ISC)2 CISSP CBK Reference, 6th Edition

DOMAIN 7Security Operations

SECURITY OPERATIONS FOCUSES ON maintaining the various aspects of the organization's security controls in a functional state, as well as the processes and procedures needed to maintain security across people, processes, and technology. Organizations must identify and assess the risks they face and then apply appropriate risk mitigations in the form of security controls. Security operations (SecOps) covers a broad base of functions across the organization. Many of these areas will be outside the purview of the security practitioner, such as physical security, which is often handled by building or facility engineers, but the security function retains accountability for ensuring security is properly understood and ...