Improved Security through Information Security Governance

The information security planning at the strategic level of the enterprise through Information Security Governance (ISG) and empirically assess of its value in enhancing the quality of information security programs is examined. ISG supports the optimization of security investments in support of business objectives and enables the firm to use security knowledge and infrastructure effectively. Executive management support is frequently cited as a critical component for information security program success. The discrepancy of perceptions between ISG Implementers and ISG Non-Implementers is valid for the relationship between business and information security. Studies examining the maturity of ISG implementation is in progress, which is in line with the study of new implementations involved in the early stages of implementation against those with established ISG program.