This article evaluates four approaches towards information security governance frameworks in order to arrive at a complete list of information security components. The information security components are used to compile a new comprehensive Information Security Governance framework.
A. Da Veiga and J. H. P. Eloff. An Information Security Governance Framework. Information Systems Management, 24(4):361–372, October 2007. doi:10.1080/10580530701586136.
@article{daveiga_information_2007a,
author = {Da Veiga, A. and Eloff, J. H. P.},
doi = {10.1080/10580530701586136},
issn = {1058-0530, 1934-8703},
journal = {Information Systems Management},
language = {en},
month = {October},
number = {4},
pages = {361-372},
title = {An {{Information Security Governance Framework}}},
volume = {24},
year = {2007}
}