Governance Boards
Summary
PDF p.382Governance boards set strategic objectives, policies, and guidelines for security practices and risk management. They oversee security controls, ensure compliance, and evaluate the security program's effectiveness.
In plain words
Supplementary — not from your PDFGovernance boards set strategic objectives, policies and guidelines for security and risk management. They oversee the implementation of security controls, ensure compliance, and evaluate how effective the security programme is.
Detailed explanation
PDF p.382-
Role
- Strategic Objectives: Set policies and guidelines.
- Oversight: Implement security controls and ensure compliance.
- Evaluation: Assess security program effectiveness.
Important terms
taken from the text above- Strategic Objectives
- Set policies and guidelines.
- Oversight
- Implement security controls and ensure compliance.
- Evaluation
- Assess security program effectiveness.
Examples & real-world scenarios
Supplementary — not from your PDF- A board setting the organization's security strategy.
- A board reviewing the effectiveness of controls.
- A board approving the security budget.
Scenario
Security decisions keep being made ad hoc by different managers. A governance board provides consistent strategic direction and oversight.
Common mistakes
Supplementary — not from your PDF- Confusing a board (strategic direction) with a committee (specialist support).
- Having no oversight of programme effectiveness.
Practical skills
Supplementary — not from your PDF- Describe a governance board's responsibilities.
What I should remember
Key Points PDF p.382- Strategic Objectives: Set policies.
- Oversight: Implement controls.
- Evaluation: Assess effectiveness.