Security Policy Development and Implementation CISSP Domain 1 — Security and Risk Management A — Governance and Legal 8–10 minutes