First step is figuring out what your committee will look like. This phase will take you through the following activities:
- Tailor Info-Tech’s Information Security Steering Committee Charter template to define terms of reference for the ISSC
- Conduct a SWOT analysis of your information security governance capabilities
- Identify the responsibilities and duties of the ISSC
- Draft the committee purpose statement of your ISSC
Use this phase as part of the full blueprint, Improve Security Governance with a Security Steering Committee.