verifying that management's investment in information security is properly aligned with organization strategies and the organization's risk environment
verifying that management's investment in information security is properly aligned with organization strategies and the organization's risk environment