A-Overview

Question 1

What an effective governance program will use

Answer 1

Balanced scorecard, metrics, and other means to monitor these or other key processes.

Question 2

Information security governance

Answer 2

A set of activities that are established so that management has a clear understanding of the state of the organization’s security programs, its current risks, and its direct activities

Question 3

Issues that Information security can create

Answer 3

business and people issues

Question 4

Goal of the security program

Answer 4

To continue to contribute toward fulfillment of the security strategy, which itself will continue to align to the business and business objective.

Question 5

IT’s role in a successful information security governance

Answer 5

An effective IT governance is required. Without IT governance, information security governance will not be able to reach its full potential

Question 6

Downward vision flow information security governance

Answer 6

1- Business vision to 2- Business strategy ; to 3- Business Objective ; to 4- IT security Strategy ; to 5- IT security strategy; to 6- Security Policy; to 7- Security standards ; to 8- Security process ; to 9-Security Metrics

Question 7

Purpose of security governance

Answer 7

To align the organization’s security program with the business program with the needs of the business.

Question 8

Security Policy

Answer 8

Should at minimum reflect directly the mission, objectives, and goals of the organization.

Question 9

Standards

Answer 9

Help to drive a consistent approach to solving business challenges

Question 10

Processes

Answer 10

Formalized descriptions of repeated business activities that include instructions to applicable personnel.

Question 11

Two keys results of an effective security governance program

Answer 11

• Increased trust Customers, suppliers, and partners trust the organization to a greater degree when they see that security is managed effectively. • Improved reputation The business community, including customers, investors, and regulators, will hold the organization in regard.

Question 12

When does governance begin

Answer 12

With the establishment of top-level strategic objectives that are translated into actions, policies, procedures, and other activities

Question 13

Term information security governance

Answer 13

It refers to collection of top-down activities intended to control the security organization to ensure information security supports the business.

Question 14

Ojectives

Answer 14

Desired capabilities or end states, ideally expressed in archivable, measurable terms.

Question 15

Strategy

Answer 15

Plan to achieve one or more objectives

Question 16

What should be considered when building out governance structure.

Answer 16

CIA ( Confidentiality Integrity Availability )and the type of info used by the business