Governance

Governance: The process of managing and directing an organization to achieve its goals and objectives. It is used to ensure that an organization operates efficiently and effectively. Examples of governance include setting policies and procedures, monitoring compliance, and making strategic decisions.

Government Information Security Reform Act of 2000

Government Information Security Reform Act of 2000: A US federal law that mandates government agencies to establish comprehensive security programs for their information systems. It requires annual reviews and reports to ensure the effectiveness of information security policies and practices, enhancing accountability and security measures in federal agencies.

Gramm-Leach-Bliley (GLBA) Act

Gramm-Leach-Bliley (GLBA) Act: A law passed in the United States that requires financial institutions to protect their customers’ personal information. It is used to ensure that financial institutions handle personal data responsibly and that customers’ information is secure. Examples of GLBA compliance include implementing security policies and procedures, conducting security audits, and providing security training […]

Guideline

Guideline: A general rule or principle designed to steer actions or decisions in security practices. Such guidelines are essential for creating and maintaining standards for system and network security, data protection, threat mitigation, and regulatory compliance. Notable security guideline examples include the OWASP Top 10 for web application security, the NIST Cybersecurity Framework for comprehensive […]

General Data Protection Regulation (GDPR)

General Data Protection Regulation (GDPR): A set of regulations governing the protection and processing of personal data in the European Union. It is used to ensure that individuals have control over their personal data and that companies handle it responsibly. Examples of GDPR compliance include obtaining consent from individuals before collecting their data and providing […]

Governance framework

Governance framework: A set of guidelines and principles for governing an organization. It is used to provide a consistent and structured approach to governance. Examples of a governance framework include the COBIT framework for IT governance and the ISO 27001 standard for information security management.