Cybersecurity leaders can achieve an effective and robust defensible information security management program by:
Ensuring clear accountability for information risk to influence effective risk-based decisions.
Building a program that reflects the unique business context of the organization.
Engineering the program for agility and continuous improvement by emphasizing key principles and formalizing security processes.