$ cat principles.md
Principles
The foundations every BitGate ISS engagement is built on.
// the cia triad
Confidentiality, Integrity, Availability
The three goals at the heart of information security. Every recommendation we make protects at least one of them, and good security balances all three.
Confidentiality
Only the right people can see the right information.
> Access control, least privilege and encryption.
Integrity
Information and systems stay accurate and unaltered.
> Change control, logging and verification.
Availability
Systems are there when the business needs them.
> Resilient infrastructure, backups and disaster recovery.
// common body of knowledge
The 8 CISSP domains
Exam weights per the ISC2 CISSP exam outline effective April 15, 2024.
The CISSP certification covers eight domains that together span the full scope of a security program. Our services draw on all eight, from governance and risk to secure operations and recovery.
- 0116%
Security & Risk Management
Governance, policy, risk, compliance and business continuity.
- 0210%
Asset Security
Classifying, handling and protecting information assets.
- 0313%
Security Architecture & Engineering
Secure design, cryptography and physical security.
- 0413%
Communication & Network Security
Securing networks and the data moving across them.
- 0513%
Identity & Access Management
Who gets access to what, and proving it.
- 0612%
Security Assessment & Testing
Audits, vulnerability scanning and testing controls.
- 0713%
Security Operations
Monitoring, incident response and disaster recovery.
- 0810%
Software Development Security
Building security into software and its supply chain.
// professional ethics
The ISC2 Code of Ethics
As an ISC2-certified professional, Mark is bound by the ISC2 Code of Ethics, and BitGate ISS holds every engagement to the same standard. The code has four canons, and they apply in order: when two conflict, the earlier one takes precedence.
Read the full ISC2 Code of Ethics
Canons summarized in our own words. The official text is published by ISC2.
- I
Protect society
Put the public good, public trust and the infrastructure people depend on first.
- II
Act honorably
Be honest, fair, responsible and lawful in every engagement.
- III
Serve principals
Give clients and employers diligent, competent service.
- IV
Advance the profession
Strengthen and protect the information security profession.
Principles you can put to work.
Talk to usCISSP and CC are registered marks of ISC2, Inc.