Security Program Management and Oversight

Security Program Management and Oversight

• Domain 01: Security Program Management and Oversight

  • Security Policy, Standards, Procedures, and Guidelines

  • Different types of Policies

  • Standards

  • Procedures

  • Guidelines

  • External Factors

  • Monitoring and Revision

  • Roles and Responsibilities for Systems and Data

  • Governance

  • Elements of the Risk Management Process

  • Third-Party Risk Assessment and Management

  • Vendor Assessment

  • Vendor Selection

  • Vendor Monitoring, Questionnaires and Rules of Engagement

  • Summarize Elements of Effective Security Compliance.

  • Consequences of Noncompliance

  • Compliance Monitoring

  • Privacy

  • Types and Purposes of Audits and Assessments

  • Phishing

  • Anomalous Behavior Recognition

  • User Guidance and Training

  • Reporting and Monitoring