CISM Simulation 01: Set Up Security Governance
Align security with business goals, place the security function, write the right policy level and report to the board.
First step
What should you do first?
Reporting line
Where should the information security function report to keep it independent and effective?
Document level
The board wants a short statement that "all customer data must be protected according to its classification". Which document is that?
Steering committee
Who should sit on the information security steering committee?
Board report
Which metric belongs in a board report?
Framework
European customers ask for proof of an information security management system. Which standard can be certified?