Capability
Governance
Decision-making and accountability as the foundation. We put the structures, roles, and policies in place that make security a managed discipline — and make sure they’re actually followed.
What this means
Governance is about who decides, who’s accountable, and how those decisions get made and followed. It’s the foundation everything else rests on — without it, even good security work stays ad hoc and fragile.
We establish clear structures, roles, and policies, and — just as importantly — the culture that makes people actually follow them. The aim isn’t bureaucracy; it’s making sure the right decisions about security and risk are being made by the right people, consistently.
As the first of your five capabilities, Governance sets the foundation the others build on — giving Risk its accountability, Strategy its mandate, and Compliance its backbone.
What’s included
The work that sits within Governance.
Under this capability
Topics & frameworks we manage under Governance.
The disciplines and standards that turn governance from intention into practice.
Topic
Information Security Governance
Directing and overseeing security: the structures, roles, accountability, and policy that make it a managed discipline rather than something that happens ad hoc.
Explore
⟶
How it connects
Governance sets the foundation. Risk and Strategy decide where to focus. Architecture & Transformation puts it into structure. Compliance assures it’s done right.
Governance never works alone. It’s one of five capabilities we manage as a single, integrated function — your Managed Security & Risk Office.
Let’s put the right foundation in place.
From board-level accountability to day-to-day policy, we make security a governed discipline — as part of your managed office.