信息安全精品新治理和风险管理教材(ppt 73页).pptVIP

信息安全治理和风险管理Information Security Governance and Risk Management CISSP第六版培训课件之一 关键知识领域 A. Understand and align security function to goals, mission and objectives of the organization 理解安全功能并将其与机构目标、使命和宗旨相结合 B. Understand and apply security governance 理解并运用安全治理 B.1 Organizational processes (e.g., acquisitions, divestitures, governance committees) 组织过程（如收购、分拆、治理委员会） B.2 Security roles and responsibilities 安全角色与职责 B.3 Legislative and regulatory compliance 法律和监管的合规 B.4 Privacy requirements compliance 隐私要求的合规 B.5 Control frameworks 控制框架 B.6 Due care 尽职关注 B.7 Due diligence 尽职调查 关键知识领域 C. Understand an