CompTIA SecurityX Blog Series
Core Exam Objectives 1: Governance, Risk, and Compliance

Legal holds are mandates requiring organizations to preserve data that could be relevant in litigation, audits, or investigations. In cross-jurisdictional compliance, managing legal holds effectively

In cross-jurisdictional compliance, due diligence refers to the process of thoroughly assessing risks, regulatory obligations, and the operational landscape when conducting business or sharing data

Due care in the context of cross-jurisdictional compliance refers to the legal and ethical obligation of organizations to take reasonable measures to protect data, assets,

Export controls are regulatory measures designed to restrict or control the export of certain goods, technology, software, or services for reasons of national security, foreign

In today’s interconnected business landscape, organizations must navigate a complex web of regulatory and contractual obligations, especially when operating across multiple jurisdictions. These contractual obligations,

The Digital Markets Act (DMA) is an essential regulatory framework introduced by the European Union to address competitive fairness, specifically within the digital markets where

The ISO/IEC 27000 series is a globally recognized set of standards that provides frameworks and guidelines for managing information security. It offers a structured approach

The Payment Card Industry Data Security Standard (PCI DSS) is a globally recognized security standard designed to secure cardholder data and protect it from misuse.

Compliance plays a vital role in shaping information security strategies across organizations, especially in sectors like healthcare, finance, government, and utilities, where data protection and

A comprehensive threat model must account for the motivation of adversaries, as it shapes the type, scale, and persistence of potential attacks. By examining motivations

In the context of Governance, Risk, and Compliance (GRC), understanding the resources available to threat actors, specifically time and money, is essential for accurate threat

In cybersecurity, understanding actor characteristics is essential to performing comprehensive threat modeling activities. Actor characteristics refer to the traits, capabilities, and resources that adversaries may