1.3 Evaluate and Apply Security Governance Principles

» Alignment of the security function to business strategy, goals, mission, and objectives

» Organizational processes (e.g., acquisitions, divestitures, governance committees)

» Organizational roles and responsibilities

» Security control frameworks (ISO, NIST, COBIT, SABSA, PCI DSS, FedRAMP)

» Due care / due diligence

1.3 – Evaluate and Apply Security Governance Principles