CC 1-5 Governance.pdf
•
0 likes•22 views
This document outlines the key concepts within Domain 1 of the CISSP, including information security principles, risk management processes, security controls, ethics, and governance processes. It defines several important governance elements such as laws and regulations, standards, policies and procedures, security policies, and the role of a security committee in formulating policy, reviewing effectiveness, and providing support for security initiatives.
Recommended
More Related Content
Similar to CC 1-5 Governance.pdf
Similar to CC 1-5 Governance.pdf (20)
More from Waleed Elnaggar
More from Waleed Elnaggar (11)
Recently uploaded
Recently uploaded (20)
CC 1-5 Governance.pdf
- 1. Domain 1 - Security Principles 1.1: Concepts of InfoSec 1.2: Risk management process 1.3: Understand security controls 1.4: Understand (ISC)² Code of Ethics 1.5: Governance processes Waleed Elnaggar https://www.youtube.com/naggaracademy
- 3. Laws and Regulations https://www.youtube.com/naggaracademy Laws and Regulations means any and all applicable current or future laws, rules, regulations, ordinances, codes, orders and permits of the governmental and quasi-governmental bodies, agencies, authorities and courts having jurisdiction.
- 4. Standards https://www.youtube.com/naggaracademy Set of criteria organizations can follow to protect their business. Different standards are developed by various organizations and agencies, such as the International Organization for Standardization (ISO) and the National Institute of Standards and Technology (NIST)
- 6. Security Policy https://www.youtube.com/naggaracademy IT Security policy is a document that spells out the rules, expectations, and overall approach that an organization uses to maintain the confidentiality, integrity, and availability of its data. Security policies exist at many different levels, from high-level constructs that describe an enterprise’s general security goals and principles to documents addressing specific issues, such as remote access or Wi-Fi use.
- 7. Security Committee https://www.youtube.com/naggaracademy The responsibilities of the Information Security Committee are: Formulate, review, and recommend information security policy. Review the effectiveness of policy implementation. Provide clear direction and visible management support for security initiatives.