Governance Risk Compliance
Khung chính sách
A structured set of overarching policies, standards, and guidelines that governs how information security, compliance, and risk are managed across an organization.
Quick answer: A structured set of overarching policies, standards, and guidelines that governs how information security, compliance, and risk are managed across an organization.
This term page is part of the Protermify Cybersecurity glossary and is published as static HTML for fast indexing and clear language coverage.
Definition
A structured set of overarching policies, standards, and guidelines that governs how information security, compliance, and risk are managed across an organization.
Operational example
The organization's policy framework is aligned with ISO/IEC 27001 and regularly reviewed to address emerging cyber risks.
Localized term
Khung chính sách
Localized example
Khung chính sách của tổ chức phù hợp với ISO/IEC 27001 và được rà soát định kỳ để giải quyết rủi ro mạng mới phát sinh.
Definition language
English reference definition
Source
ISO 27001, NIST Cybersecurity Framework, MITRE ATT&CK
Exam relevance
- CISSP
- CompTIA Security+
- CEH
Target audience
- SOC Analysts
- Security Engineers
- Incident Responders
