Summary CISM Certified Information Security Manager Bundle

A snapshot of the summary - CISM Certified Information Security Manager Bundle Author: Peter H Gregory ISBN: 9781260459012

• 1 Becoming a CISM

• How Many Domain are covered in CISM

  Four
• Which Domain is describe in Chapter 2

  Information Security Governance
• In which domain is Information Security Program Development and Management covered

  Domain 3

• 2 Information Security Governance

• Who is responsible for governance in a company

  Board of Directors

• 2.1 Introduction to information Security Governance

• What is the purpose of Security Governance

  To align the Security Program to the Business needs
• What is a desired capability or end state, ideally expressed in achievable, measurable terms?

  Objectives
• Data owners must provide a safe and secure environment to ensure confidentiality, integrity and availability of the transaction. This is an example of which information security

  Policy
• What is assumed as a minimum security level throughout an organization

  Baseline
• Which of the following are likely to be updated Most frequently  Policy, Standards, Procedures

  Procedures (policies and standards are more static)

• 2.1.1 Reason for Security Governance

• With which triangle could you understand the priority of the business

  CIA