Overview

Governance professionals have a tremendous amount of opportunity to influence throughout the organization. They are relied upon to work with business stakeholders to help align security strategy and objectives with business strategy and objectives. They are also relied upon to work with employees throughout the organization to ensure they are kept up-to-date on security policies, procedures, and new and emerging security threats. In this way, governance acts as a bridge between security and the organization.

Governance professionals, however, also play a vital role in ensuring security controls are operating as expected. They do this by examining the expected control’s function and designing tests to see if the control does perform as anticipated. Performing this function consistently can improve an organization’s security posture dramatically by fixing malfunctioning controls before a security event can occur.