CSEC 705 Week 2

governance

management oversight of all other business processes to ensure that business processes effectively meet the organizations business vision and objectives

ISG

a collection of top-down activities intended to control the security of the organization, form a strategic perspective to ensure that information security supports the business

ISG processes

personnel management, risk management, configuration management, chnage management, incident management, business continuity plan

board of directors

NOT in charge of cybersecurity management, they are cybersecurity oversight which means they set expectations for management

5 principles for effective cybersecurity at the board level

1. cybersecurity as a strategic risk

2. legal and disclosure implications

3. board oversight structure and access to expertise

4. an enterprise framework for managing cyber risk

5. cyberscurity measurement and reporting