GOVERNING INFORMATION SECURITY PROGRAMS

Catalog description

Describes the main components of a well-defined information security governance structure: a risk-based approach to managing cybersecurity measures focusing on Risk Assessment, Control Selection, Control Implementation, Measurement results, Compliance Documentation, and IT Auditing. Delineates several well-regarded and well-used IT and IT security governance frameworks that can apply and govern security policies and protocols in organizations.