Background

 

 Background needed

 

 GRC- Governance, Risk, Compliance

 

 Senior Management and GRC

 

 Senior Management and Risk

 

 Organization Structure

 

Domain  : Information Security Governance

 

 Introduction to Security Concepts

 

 Business Goals and Objective

 

 Information Security Governance

 

 CIA Triad

 

 Information Security components

 

 Security Program Objectives

 

 Information Security Governance Output.

 

 Define roles and responsibilities

 

 GRC

 

 Governace of Third party

 

 Establish, monitor, evaluate and report metrics

 

Domain  : Information Risk Management and Compliance

 

 What is Risk

 

 Asset Evaluation

 

 Information Asset Register

 

 Classification Schemes

 

 Risk Register

 

 Alligment of Risk Asemment and BIA

 

 Business Impact Analysis – BIA

 

 Ethics Issue

 

 Control Types

 

 Control Catagory

 

 Evaluate information security controls

Domain  : Information Security Program Development and Management

 

 Establish and maintain the information security program

 

 Information Security Program Element

 

 Access Control

 

 Authorization

 

 Authentication

 

 IDS

 

 Firewall

 

 Cryptography

 

 Symetric Encryptian

 

 Asymetric Encryptian

 

 Network Arch

 

 Hashing

 

Domain  : Information Security Incident Management

 

 Information Security Incident Managment

 

 Incident Repsonse Team

 

 Incident Report

 

 BCP- DRP

 

 BCP

 

 BIA

 

 MTD-RTO-RPO

 

 DRP

 

 Alternative Sites