Information Security Governance
An information security steering group function
Legal and regulatory issues associated with Internet businesses, global transmissions and trans border data flows
Common insurance policies and imposed conditions
Information security process improvement
Recovery time objectives (RTO) for information resources
Cost benefit analysis techniques in assessing options for mitigating risks threats and exposures to acceptable levels.
Security metrics design, development and implementation.
Information security management due diligence activities and reviews of the infrastructure.
Events affecting security baselines that may require risk reassessments
Changes to information security requirements in security plans, test plans and reperformance
Disaster recovery testing for infrastructure and critical business applications.

SEC100 Information Security Essentials,
SEC200 Security Architecture and Design, and
SEC300 Introduction to Hacking, Defense and Response
Or equivalent experience