CORPORATE GOVERNANCE FOR INFORMATION SYSTEMS SECURITY

IT corporate governance is used for enterprise risk management and best management practices. These governance policies and procedures enable the firms to institute best practices as well as be held accountable.

In this Case, you will review the principles of IT governance and information security governance using the practical and regulatory perspectives. First review this ISACA report.

First review

NIST and ISO 27001 and the NIST CSF (Cybersecurity Framework) and Cybersecurity and privacy reference tool (National Vulnerability Database)

Then review ISACA Case studies on the NIST cyberframework for IT governance:

https://www.isaca.org/resources/cobit/cobit-case-s…

Using the cyber-framework and the National Vulnerability Database (https://nvd.nist.gov/800-53) along with other related materials noted above, compose a 3- to 5-page paper (not counting the cover and references) on the topic of applying the cyber-framework for Information Security Governance in organizations. Produce a comparative table to show key features of the framework and the risks that are reduced by implementing this framework and assessing vulnerabilities.

Please address the following issues:

Security governance principles

IT governance stakeholders

IT governance justification to managers

Role of IT security professionals in terms of governance