Information Security
Management.helpAn independent reference publication

Home / Topics / Governance

Subject desk / Governance

Governance

Make authority, accountability and escalation visible.

What to pay attention to

  1. Distinguish who makes a decision, who performs the work and who reviews its result.
  2. Give exceptions an escalation route, a decision record and a reason to revisit them.

A subject introduction to orient further reading. Examples must be adapted to the organisation and its obligations.

Connected subjects

ISMS

Connect scope, risk treatment and review in one management system.

Risk

Describe scenarios, make treatment decisions and review uncertainty.

Controls

Understand objectives, implementation and ownership.