Can you prove it?
A hospital says, "We keep patient data safe." A customer asks, "How do you know? Show me."
Saying it is not enough. A company needs rules, checks and proof. That is what information assurance and governance gives.
Key words
| Word | What it means |
|---|---|
| Information assurance | making sure information is kept safe, correct and available, and being able to show it |
| Governance | the rules and the people who decide how a company is run |
| Strategy | a long term plan to reach a goal |
| Audit | a careful check of what is done against what should be done |
| Compliance | following the rules, laws and standards that apply |
| Monitoring | checking regularly that things stay as they should |
| Framework | a set of ideas and steps that a company can follow |
| Personal data | facts about a living person, such as a name or an address |
| ISO | an international group that publishes standards, such as ISO 27001 for information security |
| NIST | a United States body that publishes a cyber security framework |
The cells students fill in are left blank in this preview.
By the end of this lesson
Note
I can explain the four jobs of information assurance and governance and why a company needs them.
Starter
Have a go
Starter
3 questionsHave a go: your answers are marked here and then forgotten. Sign in if you would like your score kept, and to pick up where you left off.Sign in to keep your score
Your answers are marked here and are not kept. A college account keeps every student’s marks.
Four jobs and an example
| Job | What it does | Example |
|---|---|---|
| Guides development and improvement | Helps write and improve plans, rules and ways of working | Writing a new rule for how staff handle personal data |
| Supports auditing | Gives a base to check today's plans, rules and ways of working against | An audit finds that some staff skipped data training |
| Informs maintenance | Keeps rules working by a plan to check them | A plan to check access rights every three months |
| Confirms compliance | Shows the company meets an ISO standard or the NIST framework | A certificate or report that the company meets a standard |
The cells students fill in are left blank in this preview.
Check
Have a go
Check
4 questionsHave a go: your answers are marked here and then forgotten. Sign in if you would like your score kept, and to pick up where you left off.Sign in to keep your score
Your answers are marked here and are not kept. A college account keeps every student’s marks.