CISSP Domain 1: Investigation Types & Security Docs

On the CISSP, the type of investigation sets the burden of proof - administrative is the lowest bar, criminal demands beyond a reasonable doubt, and civil runs on a preponderance of the evidence. This Domain 1 deep-dive walks all four investigation types and their burdens, the evidence rules that decide what holds up in court (admissibility, chain of custody, and the best-evidence rule), then the full security documentation hierarchy in order. With Grace, Erica, Kai, and Isabella, we make the mandatory-versus-recommended split razor sharp: policies, standards, procedures, and baselines are all mandatory, and only guidelines are optional advice. You will leave able to classify any investigation by its goal and sort any document into the right tier in seconds, plus the question-reading habits that turn ‘BEST’ and ‘MOST’ scenarios into a quick, defensible decision.

In this video:

• The four investigation types and the burden of proof each one demands
• Why an internal review and a criminal case live in completely different worlds
• How one chain-of-custody gap can make perfect evidence inadmissible
• The three pillars of admissible evidence: relevant, reliable, legally permissible
• The full documentation hierarchy: policy, standard, procedure, guideline, baseline
• The verb test that instantly separates a mandatory rule from optional advice

The next video moves into business continuity planning and the recovery numbers that decide whether an organization survives an outage. Anchored to the (ISC)2 CISSP Detailed Content Outline effective April 15, 2024.

▶ Watch next: CISSP BCP & BIA: RPO vs RTO vs MTD Explained https://www.youtube.com/watch?v=K8RZavaxSX4

📺 Full playlist: CISSP (2026) v2 https://www.youtube.com/playlist?list=PLlIAFxS2964_K3g6WysWnLpifoxilduGi