Any governance framework for reference?

hello. so u are looking for a governance policy that spells out on the various controls in any organzation?

There are lots of references in the Internet that you can find, but the key is understanding them and applying them correctly to your specific needs. What works for one organisation may actually create more threats for another since the risk management approach, business processes etc may be so different.

This is where security consultancy comes in as you don't want to blindly follow and implement things wrongly which can be very costly for your organisation (in terms of actual cost of implementation and reduction in productivity etc).

Do PM me if you want to have a more detailed discussion on this.

hmm.. interesting thoughts. @Kenneth Lee i will PM u.

Anyone have implemented governance framework in ur compnay? can share the framework with me? u can mask out sensitive info. tks!