General security concepts 12% ---2. Threats, vulnerabilities and mitigations 22% 1. Attacks, threats and vulnerabilities 24% 3. Security architecture 18% 2. Architecture and design 21%--- ---3. Implementation 25% 4. Security operations 28% 4. Operations and incident response 16% 5. Security program management and oversight 20% 5. Governance ...