verifying that management's investm

verifying that management's investment in information security is properly aligned with organization strategies and the organization's risk environment
inculcating a culture that recognizes the critically of information and information security to the organization.
assuring that a comprehensive information security program is developed and implemented
demanding report from the various layer of management on the information security program's effectiveness and adequacy