Help
Options
Didn't know it?
click below
click below
Knew it?
click below
click below
Don't Know
Remaining cards (0)
Know
retry
shuffle
restart
0:00
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.
Normal Size Small Size show me how
Normal Size Small Size show me how
5.1
Elements of effective security governance
| Term | Definition |
|---|---|
| Data owner | senior executive role that has the responsibility for maintaining the CIA of the information asset |
| Data controller | holds responsibility for deciding purposes and methods of data storage, collection, and usage, and for guaranteeing the legality of processes |
| Data processor | group or individual hired by the data controller to help with tasks like collecting, storing, and analyzing data |
| Data steward | focused on the quality of data |
| Data custodian | handles the management of the system where the data assets are stored |
| Governance | strategic leadership, structures, and processes that ensure an orgs IT infrastructure aligns with its business objectives |
| Governance monitoring | regularly reviewing and assessing the effectiveness of the governance framework |
| Governance revision | updating the governance framework to address these gaps/weaknesses |
| Boards | a board of directors is a group of individs elected by shareholders to oversee the management of an org |
| Committees | subgroups of a board of directors, each with a specific focus |
| Gvt entities | establishes laws and regulations that orgs must comply with |
| Centralized structures | decision making authority is concentrated at the top levels of management |
| Decentralized structures | distributes decision making authority throughout the org |
| Acceptable use policy (AUP) | doc that outlines the do’s and don’ts for users when interacting with an orgs IT systems and resources |
| Business continuity | focuses on how an org will continue its critical operations during and after a disruption |
| Software development lifecycle (SDLC) | guides how software is developed within an org |
| Change management | aims to ensure that changes are implemented in a controlled and coordinated manner, minimizing the risk of disruptions |
| Standards | provide a framework for implementing security measures, ensuring that all aspects of an org’s security posture are addressed |
| Types of standards | physical, encryption, access control, password |
| Procedures | systematic sequence of actions taken to achieve a specific outcome |
| Change management | systematic approach to dealing with changes within an org |
| Playbooks | checklist of actions to perform to detect and respond to a specific type of incident |
| Regulatory considerations | covers a wide range of areas, from data protection and privacy to environmental standards and labor laws |
| Legal considerations | closely tied to regulatory considerations, but they also encompass other areas like contract law and IP |
| Industry considerations | the specific standards and practices that are prevalent in a particular industry |
| Local considerations | local ordinance in a city or zoning laws |
Created by:
crly