CompTIA Advanced Security Practitioner (CASP) CAS-003 Cert Guide, Second Edition

Chapter 2. Security, Privacy Policies, and Procedures

This chapter covers the following topics:

• Policy and Process Life Cycle Management: This section discusses the effects that new business, new technologies, environmental changes, and regulatory requirements have on policy and process life cycle management.

• Support Legal Compliance and Advocacy: This section covers partnering with human resources, legal, management, and other entities to support legal compliance.

• Common Business Documents to Support Security: The documents discussed in this section include risk assessments/statements of applicability, business impact analyses, interoperability agreements, interconnection security agreements, memorandums of understanding, service-level agreements, ...