Corporate Governance for Information Security Systems: Performance and Risk Management

Corporate Governance for Information Security Systems

Question

Which of the following is a subset discipline of Corporate Governance focused on information security systems and their performance and risk management.

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

C.

The correct answer is C. ISG (Information Security Governance).

Corporate Governance is the system of rules, practices, and processes by which a company is directed and controlled. It involves balancing the interests of a company's many stakeholders, such as shareholders, management, customers, suppliers, financiers, government, and the community. Corporate Governance is responsible for creating value, monitoring risk, and providing accountability.

Information Security Governance (ISG) is a subset discipline of Corporate Governance that focuses on information security systems' performance and risk management. It involves the strategic alignment of security with business objectives, assigning accountability for security, and measuring security's effectiveness. ISG is responsible for ensuring that information security policies, standards, and procedures align with the organization's goals and objectives, including compliance with legal and regulatory requirements.

A. Computer Misuse Act is a UK law that criminalizes unauthorized access to computer systems and networks.

B. Clinger-Cohen Act is a US federal law that requires federal agencies to implement information technology management reforms.

D. Lanham Act is a US federal law that governs trademarks, service marks, and unfair competition.

Therefore, neither of these acts is a subset discipline of Corporate Governance focused on information security systems and their performance and risk management.