StudyToCert

All certifications / SecurityX / Lessons

CompTIA SecurityX CAS-005 · Domain 1: Governance, risk and compliance

Security frameworks and standards: NIST CSF, NIST SP 800-53, ISO/IEC 27001, CIS Controls and CSA CCM

▶ Watch the overview video

Last reviewed September 25, 2026 · Leer en español

Frameworks give structure to a security program so you are not inventing requirements from scratch. They fall into a few types: outcome frameworks that describe what a program should achieve, control catalogs that list specific safeguards, and management system standards that define how to run and improve the program. SecurityX questions ask you to pick the one that fits a situation.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 4 more sections, 5 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study SecurityX for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the SecurityX study plan