You're reading from Certified Information Security Manager Exam Prep Guide Aligned with the latest edition of the CISM Review Manual to help you pass the exam with confidence

Product type Paperback

Published in Nov 2021

Publisher Packt

ISBN-13 9781801074100

Length 616 pages

Edition 1st Edition

Concepts

Information Security

Author (1):

Hemang Doshi

Preface

1. Section 1: Information Security Governance

2. Chapter 1: Information Security Governance FREE CHAPTER

3. Chapter 2: Practical Aspects of Information Security Governance

4. Section 2: Information Risk Management

5. Chapter 3: Overview of Information Risk Management

6. Chapter 4: Practical Aspects of Information Risk Management

7. Chapter 5: Procedural Aspects of Information Risk Management

8. Section 3: Information Security Program Development Management

9. Chapter 6: Overview of Information Security Program Development Management

10. Chapter 7: Information Security Infrastructure and Architecture

11. Chapter 8: Practical Aspects of Information Security Program Development Management

12. Chapter 9: Information Security Monitoring Tools and Techniques

13. Section 4: Information Security Incident Management

14. Chapter 10: Overview of Information Security Incident Manager

15. Chapter 11: Practical Aspects of Information Security Incident Management

16. Other Books You May Enjoy

Policy, standards, and procedures

A security program is implemented through a specific set of policies, standards, and procedures. Let's understand how each one of these operates:

Policies: A policy is a set of ideas or strategies that are used as a basis for decision making. They are the high-level statements of direction by management.
There can be multiple policies at the corporate level as well as the department level. It should be ensured that department-level policies are consistent and aligned with corporate-level policies.
Standards: A standard is a mandatory requirement to be followed in order to comply with a given policy or framework or certification or regulation. A standard provides detailed directions to comply with the policy.
A standard helps to ensure an efficient and effective process, resulting in reliable products or services. Standards are updated as and when required to incorporate new processes, technology, and regulatory requirements.
A standard...

The rest of the chapter is locked