Information Privacy Engineering and Privacy by Design: Understanding Privacy Threats, Technology, and Regulations Based on Standards and Best Practices

Chapter 10. Information Privacy Governance and Management

Learning Objectives

After studying this chapter, you should be able to:

• Explain the concept of security governance and how it differs from security management

• Provide an overview of the key components of security governance

• Explain the roles and responsibilities that are part of security governance

• Explain the concept of security governance

• Explain the roles and responsibilities that are part of privacy governance

• Understand the key areas of privacy management

• Present an overview of the topics that should be addressed by a privacy program plan, a privacy plan, and a privacy policy

• Present an overview of the OASIS privacy management reference model

This chapter looks at the key concepts ...