3. security architecture and models
8. operations security
7. physical sec
6. cryptography
10. law invest & ethics
2. access control
Cissp why
