CSSLP: Certified Secure Software Lifecycle Professional

Question

Information security management is the process of defining security controls to protect information assets.

The first action in a management program for implementing information security is to have a security program in place. What are the objectives of a security program? Each correct answer represents a complete solution. Choose all that apply.

Choose three

Explanation

A security program needs an organizational structure with defined accountability, security education to ensure personnel understand their responsibilities, and information classification to apply handling and protection requirements according to information sensitivity. System classification is not an objective in this framework. NIST guidance likewise treats organization-wide program controls and awareness/training as foundational elements of an information security program.

Learn more

CSSLP: Certified Secure Software Lifecycle Professional

AstroTutor

Notes

Readiness

QuestionQ133

Community Discussion