Developing a framework for understanding Security Governance

With reported security incidents in organisations on the increase, effective Security Governance is expected to become a major issue in organisations. A research framework of Security Governance was created from a literature review into Corporate Governance, IT Governance, and Security Management. Reported in this paper is an initial case study based on this framework. The framework covers the following areas of Security Governance: Strategic Context, Decision Making Rights, Accountability Infrastructures, Input Rights, and Experience and Culture. Although the initial case study was limited due to the participating organisations’ concerns about security, the framework still provided an insightful and interesting description about Security Governance in organisations.