Information security domain

MDCG's cybersecurity guidance uses ENISA's domains to separate data protection from protection of the infrastructure and of operations. The information security domain is about the data itself.

ENISA defines Information Security Domain as "Protection against the threat of theft, deletion or alteration of stored or transmitted data within a cyber system".

MDCG 2019-16 Rev.1, Section 2.1, IT Security, Information Security, Operation Security (ENISA definition)