Information security governance and compliance
Running security as a management system: risk assessment, policies and controls, frameworks and certifications, audits and evidence, awareness and metrics.
Also described as
- CISO
- ISMS
- ISO 27001
- NIST
- NIST CSF
- SOC 2
- information security policy
- risk assessment
- security controls
- security awareness
Tools
- SOC 2
Roles that need it
Where the weights come from
The weight is this skill's share of each role; the weights of one role add up to 100 percent.
Source: the EFO role catalogue, built from the ESCO classification and reviewed by the editors.
Critical for
- Cybersecurity GRC ConsultantYour role
Processes where it is used
- ICT risk and operational resilience