This book gives security leaders a practical guide to building and running an information security governance program. It covers strategy, accountability, risk appetite, policy, compliance, control frameworks, privacy, third-party risk, cloud governance, and executive reporting.
You'll learn how to turn business priorities into a funded security roadmap, assign clear decision rights, measure performance, prepare for audits, manage incidents, and improve program maturity. It also addresses security culture, ethical leadership, automation, AI, and adapting governance as threats and business needs change.
A strong fit for CISOs, security managers, risk and compliance professionals, auditors, consultants, and practitioners preparing for governance-focused cybersecurity certifications.