The International Information Systems Security Certification Consortium $($ISC$){?}^2$ and ISO defined $8$

security domains and $14$ ISO $27001$ control sets $($Controls$)$ respectively.

CISSP Security Domains and ISO $27001$ Control sets. $[10$ marks$]$

a$.$ What was the motive of $($ISC$){?}^2$ to create security domains?

$[2$ marks$]$

b$.$ Match these ISO$27001$ control sets to the corresponding CISSP security domains.

$[5$ marks$]$

c$.$ Which CISSP security domain covers the control of logical and physical access to assets in

an organization?

$[1$ mark$]$

d$.$ Is it compulsory to implement all security domains or control sets in an organization? Motivate

your answer?

$[2$ marks$]$