2005 edition: 133 controls in 11 domains - 2013 revision: 114 controls in 14 domains - 2022 revision: 93 controls in 4 themes, new controls for cloud, threat intelligence, data masking