Explain the relationship between executive leadership, corporate governance and information security governance. Describe the components used to construct an information security strategy. Explain how the risk assessment process influences the information security strategy. Explain the process and requirements used to develop an effective information risk response strategy Describe elements of an effective information security program Explain the process of developing and maintaining a corporate information security program Describe the techniques used to assess the company's ability and readiness to manage an information security incident Describe methods for measuring and improving response and recovery capabilities Prepare for CISM certification, ISACA Certified Security Manager