Managing Risk and Information Security: Protect to Enable

by Malcolm Harkins

A framework for decision rights and accountability to encourage desirable behavior in the use of IT. Governance identifies who will make key IT decisions and how will they be held accountable.”