Information Security and Risk Management
Information security management establishes the foundation for a comprehensive security program to ensure the protection of an organization’s information assets.

Access Control
Access Control is the backbone of information security.  It is the enforcer of policy, offers assurance in enterprise operations, supports business objectives, and assists in forensic investigations.  The importance of access controls cannot be understated, and it is pervasive in the discussion of information security.

Physical and Environmental Security
Address the common physical, environmental, and procedural risks that may exist in the environment in which the in which the information system is managed.  It also addresses physical and procedural defensive and recovery strategies, countermeasures, and resources, including the corporate physical infrastructure, security policy and procedures, physical security tools, and the organization’s staff.

Security Architecture and Design
Address the high level and detailed processes, concepts, principles, structures, and standards used to define, design, implement, monitor, and secure/ensure operating systems, applications, equipment, and networks.  It addresses the technical security policies of the organization as well as the implementation and enforcement of those policies.

Business Continuity and Disaster Recovery Planning
Address the preparation, processes, and practices required to ensure the preservation of the business in the face of major disruptions to normal business operations.  BCP and DRP involve the identification, selection, implementation, testing, and updating of processes and specific actions necessary to prudently protect critical business processes from the effects of major system and network disruptions and to ensure the timely restoration of business operations if significant disruptions occur.

Telecommunications and Network Security
Network security is often described as the cornerstone of IT security.  The network is a central asset, if not the most central, in most IT environments.  Loss of network connectivity on any level can have devastating consequences, while control of the network provides an easy and consistent venue of attack.  Conversely, a well-architected, -protected, and –guarded network provides powerful protection and will stop many attacks in their tracks.