Practice-Domain Matrix

All 12 practices across 6 domains. Click any cell to explore the practice-domain combination in detail.

Practice	Business Function	Software	Data	Infrastructure	Vendors	Processes	Endpoints
Strategy & Metrics (SM)	Governance	SM-Sof	SM-Dat	SM-Inf	SM-Ven	SM-Pro	SM-End
Policy & Compliance (PC)	Governance	PC-Sof	PC-Dat	PC-Inf	PC-Ven	PC-Pro	PC-End
Education & Guidance (EG)	Governance	EG-Sof	EG-Dat	EG-Inf	EG-Ven	EG-Pro	EG-End
Threat Assessment (TA)	Building	TA-Sof	TA-Dat	TA-Inf	TA-Ven	TA-Pro	TA-End
Security Requirements (SR)	Building	SR-Sof	SR-Dat	SR-Inf	SR-Ven	SR-Pro	SR-End
Security Architecture (SA)	Building	SA-Sof	SA-Dat	SA-Inf	SA-Ven	SA-Pro	SA-End
Design Review (DR)	Verification	DR-Sof	DR-Dat	DR-Inf	DR-Ven	DR-Pro	DR-End
Implementation Review (IR)	Verification	IR-Sof	IR-Dat	IR-Inf	IR-Ven	IR-Pro	IR-End
Security Testing (ST)	Verification	ST-Sof	ST-Dat	ST-Inf	ST-Ven	ST-Pro	ST-End
Issue Management (IM)	Operations	IM-Sof	IM-Dat	IM-Inf	IM-Ven	IM-Pro	IM-End
Environment Hardening (EH)	Operations	EH-Sof	EH-Dat	EH-Inf	EH-Ven	EH-Pro	EH-End
Monitoring & Logging (ML)	Operations	ML-Sof	ML-Dat	ML-Inf	ML-Ven	ML-Pro	ML-End