Notes¶ Domain 1: General Security Concepts (12%) Domain 2: Threats, Vulnerabilities, and Mitigations (22%) Domain 3: Security Architecture (18%) Domain 4: Security Operations (28%) Domain 5: Security Program Management and Oversight (20%)