Software Engineering Institute | Carnegie Mellon University
Software Engineering Institute | Carnegie Mellon University

Digital Library

Javascript is currently disabled for your browser. For an optimal search experience, please enable javascript.

Advanced Search

Basic Search

Content Type

Topics

Publication Date

Technical Note

Governing for Enterprise Security (GES) Implementation Guide

  • August 2007
  • By Julia H. Allen , Jody R. Westby
  • In this 2007 report, the authors provide prescriptive guidance for creating and sustaining an enterprise security governance program.
  • Publisher: Software Engineering Institute
  • Abstract

    Governing for enterprise security means viewing adequate security as a non-negotiable requirement of being in business. If an organization's management does not establish and reinforce the business need for effective enterprise security, the organization's desired state of security will not be articulated, achieved, or sustained. To achieve a sustainable capability, organizations must make enterprise security the responsibility of leaders at a governance level, not of other organizational roles that lack the authority, accountability, and resources to act and enforce compliance. 

    This implementation guide builds upon prior publications by providing prescriptive guidance for creating and sustaining an enterprise security governance program. It is geared for senior leaders, including those who serve on boards of directors or the equivalent. Throughout the implementation guide, we describe the elements of an enterprise security program (ESP) and suggest how leaders can oversee, direct, and control it, and thereby exercise appropriate governance. 

    Elevating security to a governance-level concern fosters attentive, security-conscious leaders who are better positioned to protect an organization's digital assets, operations, market position, and reputation. This document presents a roadmap and practical guidance that will help business leaders implement an effective security governance program.

  • Download

Cite This Report

SEI

Allen, Julia; & Westby, Jody. Governing for Enterprise Security (GES) Implementation Guide (CMU/SEI-2007-TN-020). Software Engineering Institute, Carnegie Mellon University, 2007. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=8251

IEEE

Allen. Julia, and Westby. Jody, "Governing for Enterprise Security (GES) Implementation Guide," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Note CMU/SEI-2007-TN-020, 2007. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=8251

APA

Allen, Julia., & Westby, Jody. (2007). Governing for Enterprise Security (GES) Implementation Guide (CMU/SEI-2007-TN-020). Retrieved December 19, 2014, from the Software Engineering Institute, Carnegie Mellon University website: http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=8251

CHI

Julia Allen, & Jody Westby. Governing for Enterprise Security (GES) Implementation Guide (CMU/SEI-2007-TN-020). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2007. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=8251

MLA

Allen, Julia., & Westby, Jody. 2007. Governing for Enterprise Security (GES) Implementation Guide (Technical Report CMU/SEI-2007-TN-020). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=8251