Loading lesson

Security governance: policies, standards and procedures

Domain 5: security program management and oversight (V7 20% · V8 14%) · Lesson 1 of 6

Lesson 1 of 6

Ask a tutor

Lesson 1 of 6 · Domain 5: security program management and oversight (V7 20% · V8 14%)

Security governance: policies, standards and procedures

3 quick checks≈3% of the testFoundational

Reading is free. Sign in to tick off lessons, keep your place and track your mastery.

By the end you’ll be able to

Distinguish guidelines, policies, standards and procedures, and choose the right document for a need
Explain key policies: acceptable use, information security, business continuity, disaster recovery, incident response, SDLC, change management, BYOD, clean desk, data classification and retention, access control, data disposal, vulnerability disclosure and privacy

0% read

Explain external considerations (regulatory, legal, industry, local/regional, national, global) and governance structures (boards, committees, government entities, centralized vs decentralized)

Assign roles for systems and data: owner, controller, processor, custodian/steward

This lesson hasn’t been written yet

Security+ lessons are written from the official syllabus the first time a learner opens them, then saved for everyone. Sign in and this one is written for you in a minute or two. It’s free.

Sign in Create a free account