Relationship between Information security Charter vs Strategy vs Policy vs Program

Prabh Nair Prabh Nair

Prabh Nair

CISO for Day | Your Mentor for Life?? | Podcaster | CISSP-ISSAP| CGRC| CCSP | CSSLP | CISM | CRISC | CISA | CDPSE | CIPM | CIPP/E

发布日期: 2024年5月18日
+ 关注


Sequence and Relationship

  1. Information Security Charter: Establishes the high-level vision, mission, and governance for information security.
  2. Information Security Strategy: Develops a strategic plan to achieve the objectives outlined in the charter.
  3. Information Security Policy: Provides detailed guidelines and standards to implement the strategy.
  4. Information Security Program: Executes the policies through specific initiatives and controls.


Surya Chirravuri

Senior Cloud Security Consultant

9 个月

Thanks Prabh, well explained. My understanding is that security policy provides a base for developing standards and guidelines that helps implement the policy statements which are aligned to the charter. The policy itself does not provide standards and guidelines, but rather they are developed by referencing the policy statements.. happy to be corrected.

赞
回复
2 次回应
Riadh Brinsi

CISSP Certified - AF Veteran

9 个月

Insightful! Thanks Prabh Nair for your cyber insights

赞
回复
Fatiha M.

Formatrice TIC et Cybersécurité | Information Systems Security Analyst | SOC Analyst | Azure and Windows System Administrator | Founder Guardians Of Cyber | Community Manager Hexadream

9 个月

Thank you Prabh Nair ????

赞
回复
POONAM SHARMA

Cyber Security Domain

9 个月

Very helpful! Thanks ??

赞
回复
Ravinder Kumar

CISSP | Technology Advisor | Manager IT | Ex-R & D Head | IAF Veteran | CC (ISC2)| CyberTM (CISCO) | ISO 27001:ISMS AUDIT | Cyber Forensics (C-DAC)| Endpoint Security (CISCO) | MBA(IT)|

9 个月

So simplified.

赞
回复
1 次回应
查看更多评论

要查看或添加评论，请登录

Prabh Nair的更多文章

  • CISSP Podcast
    2024年12月22日

    CISSP Podcast

    Happy to Release CISSP Domain 1 to Domain 4 podcast out in Spotify , Amazon , Apple and Google Domain 1 :…

    44 条评论
  • Mastering ITGC Audits: Insights, Interviews, and Practical Guides
    2024年12月18日

    Mastering ITGC Audits: Insights, Interviews, and Practical Guides

    Step-by-Step Guide to Conducting an Internal Audit How to Conduct Internal Audit Step by Step Process Internal audits…

    11 条评论
  • ISO 27001 Practical Video Series end to end
    2024年11月17日

    ISO 27001 Practical Video Series end to end

    Are you looking to master ISO 27001:2022 Implementation and take your organization’s Information Security Management…

    41 条评论
  • How to Think Like Manager : Elimination Process
    2024年10月25日

    How to Think Like Manager : Elimination Process

    MANAGERIAL MINDSET FRAMEWORK That i Follow for my ISC2 and ISACA Exams P - Policy & Strategy Level R - Risk-Based…

    38 条评论
  • Internal Audit Jobs Prep Videos
    2024年9月25日

    Internal Audit Jobs Prep Videos

    Happy to Launch Important Playlist of Internal Audit End to End Internal Audit How to Audit Enterprise Governance…

    29 条评论
  • GRC Skill-Ready Videos
    2024年9月12日

    GRC Skill-Ready Videos

    Are you looking to master Governance, Risk, and Compliance (GRC)? Look no further! I have curated a playlist of…

    27 条评论
  • My Important CC ISC2 Video Playlist to Clear Exam in First Attempt
    2024年9月9日

    My Important CC ISC2 Video Playlist to Clear Exam in First Attempt

    My Playlist BCP BCP Questions Incident Management Incident Management Question Authentication Protocol OSI Model…

    20 条评论
  • CISSP / CCSP Asymmetric Cryptography Notes
    2024年8月5日

    CISSP / CCSP Asymmetric Cryptography Notes

    Asymmetric Cryptography Notes Cryptographic Algorithms and Their Categories RSA (Rivest-Shamir-Adleman) ECC (Elliptic…

    10 条评论
  • Intellectual Property CISSP Knowledge Notes
    2024年8月2日

    Intellectual Property CISSP Knowledge Notes

    IP Types: Patents: Protect inventions and discoveries. Trademarks: Protect brand names, slogans, and logos.

    7 条评论
  • Applying CISSP Principles to Manage the CrowdStrike Security Incident
    2024年7月31日

    Applying CISSP Principles to Manage the CrowdStrike Security Incident

    Incident Overview Date & Time: July 19, 2024, at 04:09 UTC. Event: Rapid Response Content update (Channel File 291)…

    18 条评论

社区洞察

其他会员也浏览了