Chapter 2: Practical Aspects of Information Security Governance
In this chapter, we will discuss practical aspects of information security governance and understand how governance impacts the success of security projects. You will learn about different aspects of what a security strategy is. You will also understand the role of an information security manager in supporting business objectives.
The following topics will be covered in this chapter:
- Information security strategy and plan
- Information security program
- Enterprise information security architecture
- Organization structure
- Record retention
- Awareness and education
Let's understand each one of these topics in detail.