Information security

Protecting information begins with understanding what is used, for what purpose and who is responsible for it. Professional judgement relates risks, controls, incidents and review of results to the organisation's activities.

• Information and activities that need protection.
• Risks, responsibilities and applicable controls.
• Operating records, incidents and review of effectiveness.

Security professionals, management system owners and auditors who need to relate controls to risks and decisions.

The content helps frame technical questions and recognise which knowledge and background relate to an activity.

Learn the audit reference related to the topic and prepare a summary of your roles and experience. An inquiry provides requirements and availability; a formal candidature requires confirmed conditions.

Technical sources and public guides make it possible to interpret concepts, scopes and records. In an initial inquiry, describe the question and keep client data or confidential documents for an agreed channel.