CASP CompTIA Advanced Security Practitioner Study Guide: Exam CAS-002, Second Edition

Chapter 7Policies, Procedures, and Incident Response

The following CompTIA CASP exam objectives are covered in this chapter:

1. 2.3 Compare and contrast security, privacy policies, and procedures based on organizational requirements
   • Policy development and updates in light of new business, technology, risks, and environment changes
   • Process/procedure development and updates in light of policy, environment, and business changes
   • Support legal compliance and advocacy by partnering with HR, legal, management, and other entities
   • Use common business documents to support security
     • Risk assessment (RA)/statement of applicability (SOA)
     • Business impact ...