ISC2 CC Domain 1: Security Principles — The CIA Triad, Explained
Domain 1 is an average of 24% of the ISC2 CC exam. Learn the CIA triad the way the exam tests it, plus threat, vulnerability, risk and control categories.
Summary
Domain 1, Security Principles, is an average of 24% of the ISC2 CC exam — the biggest single domain. This lesson teaches the CIA triad (confidentiality, integrity, availability) the way the exam tests it: by the harm in a short scenario, not the tool in the story. It also covers threat, vulnerability, and risk, sorts the outline's three control categories (Technical, Administrative, Physical) live on screen, and ends with two original practice questions with explained answers.
Chapters
- 0:00 Domain 1 is 24% — the biggest single domain
- 0:15 The five-domain map and what Domain 1 covers
- 1:39 The CIA triad — confidentiality, integrity, availability
- 3:49 Threat, vulnerability, risk
- 6:01 Security control categories — Technical / Administrative / Physical
- 8:09 Practice questions
- 9:30 Try one in the comments
- 9:44 End card — next: A3, Domain 1 practice questions
Sources
Sources: ISC2 — Certified in Cybersecurity (CC) Certification Exam Outline, v01/2026 ↗ · ISC2 — What's New for Entry-Level Cybersecurity ↗ · NIST SP 800-12 Rev. 1 — An Introduction to Information Security ↗ · NIST SP 800-30 Rev. 1 — Guide for Conducting Risk Assessments ↗ · NIST CSWP 29 — The NIST Cybersecurity Framework (CSF) 2.0 ↗