Application and system development security involves the various controls available and used within systems and applications software and the procedures used in their development. Domain 5 addresses cryptography. This topic involves the use of secret codes to obtain desired levels of information confidentiality and integrity. Domain 6 addresses security architecture and models. Computer architecture deals with those aspects of computer organization and configuration that can be employed to achieve computer security.
Models describe the concepts used to maintain the security of systems and information.
PC and LAN security issues are also included in this domain. In this edition, the focus is on microcomputer and LAN security. Domain 7 addresses operations security. Operations security involves data center and distributed processing security issues revolving around operator and system administrator privileges, the protection of computing resources, and the need to understand the implications of threats to these important assets. This edition concentrates on the threats posed to operations security by outside activities.