CIS 54 — IT Security Goals, Strategy, Policy, and Leadership
Business and management aspects of information security: Legal and regulatory aspects; strategic planning process; security policies, and management process for a secure information systems environment.