This section of the exam covers hands-on skills for defending against and responding to cyberattacks. It focuses on practical implementation of cybersecurity controls, incident response procedures, and operational security measures. Candidates learn how to identify threats, respond to security incidents, and implement defensive strategies to protect organizational assets from cyber threats.

This section of the exam covers the comprehension of cybersecurity tools, technologies, and their applications. Candidates study various security technologies including encryption, access controls, firewalls, intrusion detection systems, and other defensive mechanisms. Understanding how these technologies work together helps organizations build effective defense-in-depth strategies.

This part of the exam covers knowledge of cybersecurity frameworks, policies, and risk management. It includes understanding established frameworks like NIST, ISO 27001, and COBIT, as well as developing organizational policies and procedures to ensure consistent security practices. Risk assessment and management are key components of effective governance.

In this part of the exam, the topics covered include the intersection of cybersecurity and auditing practices. This includes understanding how audits validate cybersecurity controls, assess compliance with policies, and provide assurance that security measures are effective. Internal auditors play a critical role in evaluating and improving the organization’s security posture.