CISSP Domain7 Section 3 and Section 4

7.3 Perform Configuration Management (e.g., provisioning, baselining, automation)

7.4 Apply foundational security operations concepts

• 7.4.1 Need to know/Least privileges
• 7.4.2 Separation of Duties (SoD) and responsibilities
• 7.4.3 Privileged account management
• 7.4.4 Job rotation
• 7.4.5 Service Level Agreement (SLA)