InfoSec 3&4

guides organizational efforts and focus resources toward specific, clearly defined goals

focuses on short-term undertakings that will be completed within one or two years

What does CISO stand for?

High-level security framework defining the overall goals, scope, and responsibilities for protecting information across the organization.

Focused policies addressing specific security concerns or technologies, such as email use or BYOD policies, within the organization.

Detailed, technical instructions and configurations for securing specific systems or devices within the organization.

describes the entire function of controlling the processes used by a group to accomplish some objective

define what is right and wrong, the penalties for violating policy, and the appeal process. Ignorance of this serves as reasonable excuse.

dictate acceptable and unacceptable behavior. ignorance of this excuses no one.

detailed statements of what must be done to comply with policy