Chapter 8: Practical Aspects of Information Security Program Development Management
In this chapter, we will discuss the practical aspects of information security program development management and look at the methods, tools, and techniques for the development of an information security program. This chapter will help CISM aspirants understand the different types of cloud computing services. We will also discuss the different types of controls.
The following topics will be covered in this chapter:
- Cloud computing
- Controls and countermeasures
- Penetration testing
- Security program metrics and monitoring
- Common information security program challenges
Let's look at each one of the preceding topics in detail.
Cloud computing
Cloud computing is the ...
Get Certified Information Security Manager Exam Prep Guide now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
