Championing Security

Another important governance task is championing security throughout the organization. Because governance professionals are well-versed in the organization’s policies and procedures, they are in a great position to explain those documents to other employees, and that can be done through information security awareness training. That type of training, however, doesn’t have to be solely focused on policies and procedures. This is a great time to bring interesting content to users that can be valuable at work and at home. For instance, you can provide live incident response training, training related to phishing emails or fraud attempts, or live hacking demonstrations. All of these trainings help improve your organization's security posture, reduce overall risk, help protect employees, and can be part of meeting certain compliance requirements.