Mike Meyers' CompTIA Security+ Certification Guide (Exam SY0-401)

MODULE 4

Understanding Security Governance

Organizations normally don’t function by asking everyone who works there to perform a task or act in a particular manner, and then leaving it up to their discretion to do so. Instead, organizations function by requiring employees to adhere to certain rules and conventions. Governance is the set of overarching rules, regulations, policies, and other directives that dictate how the organization and its employees will conduct themselves. Governance is necessary to establish authority in the organization and ensure that the personnel working in that organization behave and conduct their activities in accordance with that established authority. Although we will be focusing particularly on security governance, ...