This week’s topics
Aligning Information Security with Business Strategy
- Corporate governance and security strategy alignment
- Business impact analysis (BIA)
- Security culture and employee compliance
- Integration with ISO/IEC 27001 standards
- Part 1: Rekt Casino Hack - Business Security Strategy, Policies, and Leadership Gone Wrong
- Part 3: Rekt Casino Hack - Feeble Security Culture Disconnected from Business Objectives
What you will be able to do
- 4.3 Describe how IT security can be aligned with organisational policy.
Activity
Start with this week’s 2 videos, then: Seminar, guided reading and a short written task: describe how IT security can be aligned with organisational policy.
Study materials
Videos
- Part 1: Rekt Casino Hack - Business Security Strategy, Policies, and Leadership Gone Wrong · YouTube · SANS Institute · 53 min · for registered students
- Part 3: Rekt Casino Hack - Feeble Security Culture Disconnected from Business Objectives · YouTube · SANS Institute · 48 min · for registered students
Further resources
- Cyber Governance Code of Practice (DSIT/NCSC) · PDF · NCSC, guidance; 12 pages · for registered students
- NCSC: Cyber Security Toolkit for Boards · PDF · NCSC, guidance; 55 pages · for registered students
- CyBOK: Risk Management and Governance Knowledge Area · PDF · Cybok, textbook chapter; 41 pages · for registered students
Materials marked “for registered students” open in the student portal, which is set up as soon as you receive final acceptance.