Chapter 6: Overview of Information Security Program Development Management
In this chapter, we will discuss information security program development management and look at the methods, tools, and techniques for developing an information security program. The main objective of information security program development is to achieve the objectives of information security in an effective and efficient manner. Program development includes the process of planning, implementing, testing, monitoring, and controlling the activities related to information security. A structured security program will help an organization manage its security initiatives in an effective manner.
The following topics will be covered in this chapter:
- Information security program management overview
- Information security program objectives
- Information security framework components
- Defining an information security program road map
- Information security policies standards, and procedures ...