Information Security Governance and Risk Management
This is the foundational domain for professional information security work (Walsh). It provides standards and policies for monitoring information security programs. The domain ensures data quality necessary to support an organization’s objectives. This is critical especially to sensitive and critical information that an organization uses. Risk management is the identification and prioritization of all risks to confidentiality. The most important step in the domain is risk analysis. This involves identification of threats and vulnerabilities on applications and systems. The last phase in the domain is the implementation of the most appropriate and cost-effective security measures and controls to ...