Create the organizational structure to operate the security program and to align with the entities of the organization.

Communicate the policies and procedures necessary for a security program.

Evaluate the effectiveness of a security program