DOMAIN 5 Walk-Through: Governance, Risk, and Compliance

Essential Question:

How do organizations create security policies, manage risk, respond to incidents, and ensure compliance in a constantly changing threat environment?

💡 The Mindset of Domain 5

Domains 1–4 teach you how attacks work.

Domain 5 teaches you how organizations protect themselves before attacks happen and recover after they do.

Think of Domain 5 as:

• People
• Policies
• Processes
• Preparation
• Proof (audits)

Security is not just firewalls.

It's governance — the rules that hold everything together.

📚 Vocabulary (Students Copy)

Risk — the probability of loss + impact.

Threat — anything that can exploit a vulnerability.

Vulnerability — a weakness that can be exploited.