1. Identify

Governance & Policies

Security Frameworks

Security Controls

Security Posture & Risk Assessment

Assets & Identities

Data Compliance & GRC

Identity & Access Management

IAM & Least Privilege

Separation of Duties

4. Respond

Automation

Containment

Phases of Incident Response

Evidence & Forensics

2. Protect

Configurations

Defense in Depth

Zero Trust

Updates

Software & OS Management

5. Recover

Remediation

Assessment

3. Detect

Analytics

Logs

Monitoring

Detection Rules

6. Improve