"This publication is designed for Certified Information Security Managers (CISMs), Chief Information Security Officers (CISOs) and information security managers to use as action steps in addressing the questions posed by the 2001 ITGI publication Information Security Governance: Guidance for Boards of Directors and Executive Management. "
"It provides value and support to security managers and further expands understanding of information security governance. The list of questions on pages 16 to 24 of the Information Security Governance: Guidance for Boards of Directors and Executive Management publication was used to create a list of must-do actions for CISMs, CISOs and information security managers."