With a focus on the review and approval aspects of board responsibilities, the Data Governance Council recommends that the boards provide strategic oversight regarding information and information security, include these four things:
- Metrics tracking security milestones, understanding criticality of information and information security, visibility into the types of information and how it is used, endorsement by the board of directors
- Annual security training for all employees, continual budget reviews, endorsement of the development and implementation of a security program, metrics to track the program
- Understanding criticality of information and information security, review investment in information security, endorse development and implementation of a security program, and require regular reports on adequacy and effectiveness
- Endorsement by the board of directors for security program, metrics of security program milestones, annual budget review, report on integration and acceptance of program
Answer(s): C
Reference:
https://nanopdf.com/download/information-security-governance-guidance-for-boards- of_pdf (9)
Reveal Solution
Next Question