Information security governance and how to accomplish it

摘要: The risks and costs of information security, numerous external internal requirements obligations to customers, are the reason for interest security at highest level in companies. A set activities which describes involvement management board, executive management, specialized committees, ad-hoc groups managers is referred as Security Governance. While principles governance relatively defined, universally accepted methodology its introduction business environment missing. This raises question whether there a connection between other concepts good practices field IT with Outlining process corporate reference aims this work.