Information Security Framework

This Lesson looks at where the security function fits within the organisational structure and the role of the Information Security Officer is in developing information security policies, standards, and procedures. It then provides an understanding of the principles of information security governance, how to carry out a security audit and the importance of stakeholder engagement in implementing the organisation’s information assurance program. Finally, it looks at the incident management process and investigates the role digital forensics play in this, before reviewing the legal framework information security operates within.

Learning objectives

The objectives of this Lesson are to provide you with and understanding of:

• Where the security function fits within the organisational structure
• The role of the Information Security Officer
• Developing information security policies, standards, and procedures
• The principles of information security governance
• How to carry out a security audit
• Implementing an information assurance program and the importance of stakeholder engagement
• The incident management process and the role of digital forensics
• The legal information security framework
• Information assurance standards and how they should be applied within an organisation

Intended audience

This Lesson is ideal for members of information security management teams, IT managers, security and systems managers, information asset owners and employees with legal compliance responsibilities. It acts as a foundation for more advanced managerial or technical qualifications. 

Prerequisites

There are no specific pre-requisites to study this Lesson, however, a basic knowledge of IT, an understanding of the general principles of information technology security, and awareness of the issues involved with security control activity would be advantageous.

Feedback

We welcome all feedback and suggestions - please contact us at support@cloudacademy.com if you are unsure about where to start or if would like help getting started.