1.6 A Organization Structure, Roles & Responsibilities

A collection of flashcards focusing on key vocabulary and concepts related to information security governance and accountability within organizations.

Accountability

The obligation to report, explain and be answerable for resulting consequences.

Responsibility

The duty to complete assigned tasks or obligations, which can be delegated.

Corporate Enterprise Governance

Aligning security initiatives with the organization's goals and objectives.

Custodian

An individual who has custody of an asset that belongs to someone else and is responsible for its protection.

Governance Structure

A framework that includes laws, regulations, policies, and the identification of accountable roles.

Executive Management

The individuals at the top of an organization, such as the CEO, who are accountable for asset protection.

Least Privilege

A security principle that suggests giving users the minimum levels of access necessary to perform their job functions.

Owners

Individuals accountable for protecting the assets they own within the organization.

Information System Security Professionals

Individuals focused on the security of information systems and responsible for various security-related tasks.

Compliance

Ensuring adherence to laws, regulations, and industry standards related to security.