Information Governance Frameworks and Standards
The governance framework is a structure or outline that supports the implementation of the information security strategy. It provides the best practices for a structured security program. Frameworks are flexible structures that any organization can adopt as per their environment and requirements. COBIT and ISO 27001 are two widely accepted and implemented frameworks for security governance.
The Objective of Information Security Governance
Information security governance is a subset of enterprise governance. The same framework should be used for both enterprise governance and security governance to enable better integration of one with the other.
The following are the objectives of security governance:
- To ensure that security initiatives are aligned with the business strategy and that they support organizational objectives.
- To optimize security investments and ensure the high-value execution of business processes...
