Investigation consists of guidelines and principles necessary to successfully investigate security incidents and preserve the integrity of evidence. Ethics consists of knowledge of the difference between right and wrong and the inclination to do the right thing. Domain 7 addresses application program security. Application security involves the controls placed within the application program to support the security policy of the organization. Domain 8 addresses cryptography.
Cryptography is the use of secret codes to achieve desired levels of confidentiality and integrity.
Included are basic technologies, encryption systems, and key management methods. Computer operations security involves the controls over hardware, media and the operators with access privileges to these. Domain 10 addresses physical security. Physical security involves the provision of a safe environment for information processing activities with a focus on preventing unauthorized physical access to computing equipment.