DOMINIO 1

DOMINIO 1

1. C1. SECURITY GOVERNANCE THROUGH PRINCIPLES AND POLICIES

   • *CIA
     • Confidentiality
       • DEF.: Mechanisms to ennsure that data, objects and resources are restricted from unauthorized subjects
       • Concepts
     • Integrity
     • Availability
   • *Security Governance
     • Align security functions
     • Organizational processes
     • Security roles and responsabilities
     • Control Frameworks
     • *Due Care/Due Diligence
   • DEVELOP AND IMPLEMENT SECURITY POLICY
     • Standards
     • Procedures
     • Guidelines
   • THREAT MODELING
     • Types of attacks
     • Potential attaacks
     • Reduction
     • Mitigation
   • INTEGRATE SECURITY RISKS
     • HW/SW/Services
     • Third Party assessment and monitoring
     • Minimun security requirements
     • SLA