MegaGuidenCISSP®www.preplogic.comn1-800-418-6789PrepLogicPracticeExamsnVideoTrainingnMegaGuidesnPrintablesnAudioTrainingCISSP®MegaGuideCopyright©2009byPrepLogic,LLC.ProductID:010015ProductionDate:December1,2009Allrightsreserved.Nopartofthisdocumentshallbestoredinaretrievalsystemortransmittedbyanymeans,electronic,mechanical,photocopying,recording,orotherwise,withoutwrittenpermissionfromthepublisher.Nopatentliabilityisassumedwithrespecttotheuseoftheinformationcontainedherein.WarningandDisclaimerEveryefforthasbeenmadetomakethisdocumentascompleteandasaccurateaspossible,butnowarrantyorfitnessisimplied.Thepublisherandauthorsassumenoresponsibilityforerrorsoromissions.Theinformationprovidedisonan“asis”basis.Theauthorsandthepublishershallhaveneitherliabilitynorresponsibilitytoanypersonorentitywithrespecttoanylossordamagesarisingfromtheinformationcontainedinthisdocument.Volume,Corporate,andEducationalSalesPrepLogicoffersfavorablediscountsonallproductswhenorderedinquantity.Formoreinformation,pleasecontactPrepLogicdirectly:1-800-418-6789solutions@preplogic.comMegaGuidenCISSP®www.preplogic.comn1-800-418-6789PrepLogicPracticeExamsnVideoTrainingnMegaGuidesnPrintablesnAudioTrainingInformationSecurityandRiskManagement........................................9Coreinformationsecuritygoals.......................................................9SecurityPoliciesManagement........................................................9AuditFrameworks....................................................................10Informationsecuritybestpractices....................................................12Informationsecurityofficerresponsibilities............................................12ReportingModels....................................................................13PersonnelSecurity....................................................................14SecurityAwarenessTraining..........................................................14RiskManagement....................................