IT Security Controls: A Guide to Corporate Standards and Frameworks

© The Author(s), under exclusive license to APress Media, LLC, part of Springer Nature 2022

V. Viegas, O. KuyucuIT Security Controlshttps://doi.org/10.1007/978-1-4842-7799-7_5

5. Corporate Information Security Processes and Services

Virgilio Viegas¹   and Oben Kuyucu¹

(1)

Doha, Qatar

 

This chapter addresses all the processes and services in the organization’s information security scope that should be implemented. Processes related to security awareness, training, and simulated attacks are addressed in the next chapter.

Security Governance

Security governance is how you support, manage, and shape your organization’s efforts for security. It is different from security management. In “management”, you implement, whereas in “governance”, you oversee. Security ...