11.0 Security Governance Concepts

Front

Policies

Back

A strictly enforceable rule set that determines how a task should be completed.

Front

Acceptable Use Policy (AUP)

Back

A policy that governs employees' use of company equipment and Internet services. ISPs may also apply AUPs to their customers.

Front

Information Security Policies

Back

A document or series of documents that are backed by senior management and that detail requirements for protecting technology and information assets from threats and misuse.

Front

Business Continuity & Continuity of Operations Plans (COOP)

Back

A collection of processes that enable an organization to maintain normal business operations in the face of some adverse event.

Front

Disaster Recovery

Back

A documented and resourced plan showing actions and responsibilities to be used in response to critical incidents.

Front

Software Development Life Cycle (SDLC)

Back

The processes of planning, analysis, design, implementation, and maintenance that often govern software and systems development.

Front

Guidelines

Back

Best practice recommendations and advice for configuration items where detailed, strictly enforceable policies and standards are impractical.

Front

Standards

Back

Expected outcome or state of a task that has been performed in accordance with policies and procedures. Standards can be determined internally or measured against external frameworks.

Front

Procedures

Back

Detailed instructions for completing a task in a way that complies with policies and standards.

Front

Stakeholders

Back

A person who has a business interest in the outcome of a project or is actively involved in its work.