Information Security Management

Question 1

Information Security Management - General Management Practices

Answer 1

Purpose - The practice of protecting an organisation by understanding and managing risks to the confidentiality, integrity, and availability of information (CIA)

Establishing - Policies, processes, behaviours, risk management, and controls in relation to authentication, authorisation, encryption, and non-repudiation

Must be driven top-down

Interacts with every other ITIL practice