Chapter 3: Administration

Domain 2 is covered in this Chapter:

The administration area encompasses the security principles, policies, standards, procedures and guidelines used to identify, classify and ensure the confidentiality, integrity and availability of an organization's information assets. It also includes roles and responsibilities, configuration management, change control, security awareness, and the application of accepted industry practices.