Governing: Policy, Maturity Models and Planning

Executive level management is responsible for strategic business goals (including for IT/security), managing risk, defining policies for the organization, and for staffing security. Management responsibilities include risk and business continuity (the two previous chapters). This chapter addresses the remaining executive management responsibilities: planning, policies, employee responsibilities related to security, and organizational maturity.