This test measures knowledge of establishing processes and utilizing tools to protect computer systems from cyber attack. It includes application security, information security, business continuity, and identity security. This test is vendor neutral.