Chapter 2: Practical Aspects of Information Security Governance

In this chapter, we will discuss practical aspects of information security governance and understand how governance impacts the success of security projects. You will learn about different aspects of what a security strategy is. You will also understand the role of an information security manager in supporting business objectives.

The following topics will be covered in this chapter:

  • Information security strategy and plan
  • Information security program
  • Enterprise information security architecture
  • Organization structure
  • Record retention
  • Awareness and education

Let's understand each one of these topics in detail.

Information security strategy and plan

An information security strategy ...

Get Certified Information Security Manager Exam Prep Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.