134Why a Comprehensive Information Security Strategy is Essential for Effective GRC

No ratings

Presented at EuroCACSISRM 2012 by

Marcus Alldrick

After completing this session, you will be able to: Identify reasons why GRC (Governance, Risk Management and Compliance) is increasingly coming to the fore in the minds of information security professionals Develop critical relationships between governance and strategy and the underlying business drivers and influences Recognise the increasing regulatory and legislative demands in reaching compliance and legislation Identify the complexities of the current economic climate increasingly requiring effective risk management Understand the role of the CISO in providing assurance, no longer the sole domain of Audit Demonstrate the importance of formulating and implementing a comprehensive information security strategy