Obstacles to Implementation of Information Security Governance

Information security leadership has struggled for almost two decades to demonstrate that investment in information security capabilities would return a tangible value to the organization. The efforts to govern and manage security have not resulted in the value statement that has been desired. A critical look at literature reveals that the struggles with governance can be consolidated into three main topics: practitioners do not have guidance on...