IT Governance: Manager's Guide to Data Security

Information governance and data security are board level concerns because modern organizations depend on information while facing persistent threats, privacy obligations, fraud, and regulatory scrutiny. Security strategy therefore needs to be coordinated with governance, compliance, business priorities, and the value of information assets.

This management guide examines data security, ISO 27001, ISO 27002, governance responsibilities, regulatory expectations, and recognized best practice approaches. It is written for organizations that need to protect and strengthen their information security management systems in a coherent and cost conscious way.

For board members, executives, owners, managers, and security leaders, the book provides a broader governance perspective for coordinating security strategy, compliance obligations, risk decisions, and management oversight around the information on which the organization depends.