CISM - Information Security Governance - Section 1.3

Define organisational structures, roles and responsibilities that support effective information security governance.

Define the roles of the CISO, steering committee, and security teams, and articulate clear lines of accountability for information security decisions. Apply segregation of duties to prevent conflicts of interest and ensure that oversight and execution functions remain independent.

Examworthy is not affiliated with or endorsed by ISACA. Original, blueprint-aligned practice material only.