Several of you have been asking for a mapping of the new CISA 5 domains to the previous year’s six domains.  The new mapping is as follows:

The major change is the old Business Continuity and Disaster Recovery domain has been split into two parts and merged into Domain 2 for Business Continutity and into Domain 4 for Disaster Recovery.