Information Security Program: A program that outlines the policies, procedures, and technical measures used to protect an organization’s information assets. It is used in organizations to ensure that information is secure and that all employees understand their roles and responsibilities in maintaining information security. Examples – an employee training program on information security, a policy on password management, and regular security audits.
Categories: CC D1: Security Principles | CCSP D6: Legal - Risk and Compliance | CISM D3: Information Security Program | CISSP D1: Security and Risk Management | Security+ D5: Security Program Management and Oversight | SSCP D1: Security Concepts and Practices
« Back to Glossary Index