GOVGovernance & risk
Accountability, decision rights, risk ownership, controls, assurance, and executive oversight.
ARCArchitecture & engineering
Security principles, system design, trade-offs, trust boundaries, and defensible technical choices.
OPSOperations & resilience
Detection, response, recovery, continuity, evidence, and the disciplines that sustain capability.
STDStandards & audit
Requirements, implementation logic, conformity, certification, audit evidence, and professional judgment.
CLDCloud, data & privacy
Shared responsibility, data protection, platform risk, assurance, privacy, and emerging technology.
LDRLeadership & implementation
Strategy, prioritization, communication, operating models, transformation, and measurable execution.