Information Security Policies and Standards are a Chief Information Security Officer’s primary tool for communicating security expectations throughout the organization.
edgile-end-the-struggle-with-infosec-policies-and-standards-through-risk-compliance-integration