CISOGood Security Policy Names Names
I wrote a company's security policies against NIST CSF and 800-53, and now I ghostwrite books for the leaders who do this work. Most policy documents fail for two reasons: nobody knows who owns each step, and nobody knows which…