01 Governance and Frameworks
Security governance is how an organization decides what security it needs, who owns it, and how it proves the decisions are followed. Frameworks give the structure; governance gives the authority.
Files
| # | File | Format |
|---|---|---|
| 01 | Governance Fundamentals | process-based |
| 02 | ISO 27001 and ISMS | process-based |
| 03 | NIST CSF and CIS Controls | process-based |
| 04 | Roles and Responsibilities | process-based |
| 05 | Security Strategy and Metrics | process-based |
Certification Alignment
- CompTIA Security+ (governance domain)
- ISC2 CISSP (Domain 1: Security and Risk Management)
- ISACA CISM (Domain 1: Information Security Governance)
- ISO 27001 Lead Implementer / Lead Auditor
References
- NIST Cybersecurity Framework - https://www.nist.gov/cyberframework
- ISO/IEC 27001 - https://www.iso.org/standard/27001
- CIS Controls - https://www.cisecurity.org/controls
- ISACA COBIT - https://www.isaca.org/resources/cobit