
This book gives security leaders a practical guide to building and running an information security governance program. It covers strategy, accountability, risk appetite, policy, compliance, control frameworks, privacy, third-party risk, cloud governance, and executive reporting. You'll...