White Papers
Governance, Risk & Compliance (GRC)
Best Practices for Structuring a Strong Corporate Information Security Policy Process
A great security program can only be accomplished by having the foundation needed for GRC and that key feature is a good set of policies and the process needed to author, vet and approve them.