Governing for Enterprise Security (GES) Implementation Guide

摘要: Governing for enterprise security means viewing adequate as a non-negotiable requirement of being in business. If an organization's management does not establish and reinforce the business need effective security, desired state will be articulated, achieved, or sustained. To achieve sustainable capability, organizations must make responsibility leaders at governance level, other organizational roles that lack authority, accountability, resources to act enforce compliance. This implementation guide builds upon prior publications by providing prescriptive guidance creating sustaining program. It is geared senior leaders, including those who serve on boards directors equivalent. Throughout guide, we describe elements program (ESP) suggest how can oversee, direct, control it, thereby exercise appropriate governance. Elevating governance-level concern fosters attentive, security-conscious are better positioned protect digital assets, operations, market position, reputation. This document presents roadmap practical help implement