3.0 DOMAIN 3: SECURITY ARCHITECTURE AND ENGINEERING

3.1 Research, implement, and manage engineering processes using secure design principles.

• 3.1.1 Threat Modeling
• 3.1.2 Least Privilege
• 3.1.3 Defense in depth
• 3.1.4 Secure Defaults
• 3.1.5 Fail Securely
• 3.1.6 Separation of Duties
• 3.1.7 Keep it simple and Small
• 3.1.8 Zero trust or trust but verify
• 3.1.9 Privacy by design (PbD)
• 3.1.10 Shared Responsibility
• 3.1.11 Secure Access Service Edge