Rational Cybersecurity for Business: The Security Leaders' Guide to Business Alignment

© The Author(s) 2020

D. BlumRational Cybersecurity for Businesshttps://doi.org/10.1007/978-1-4842-5952-8_3

3. Put the Right Security Governance Model in Place

Dan Blum¹ 

(1)

Silver Spring, MD, USA

 

Just as a Constitution sets forth how to govern a nation, security charters and policies can formally define security-related roles and responsibilities for a business. Security governance is a set of processes and capabilities operated jointly by security and business leaders. The combined leadership manages cybersecurity risk, policy, budgets, and reporting to executives or stakeholders.

When security governance is well defined, the CISO has the right balance of authority and responsibility. Business and security leaders can handle security issues in a ...