please provide references and citations for further research

• Describe the primary goals and process for developing an information security program in your organization or an organization with which you are familiar.
• Who should lead this development, and who manages the program?
• How will the information security program policies and procedures be communicated to employees and be enforced?
• What are the applicable measurements and requirements for a successful information security program?

please provide references and citations for further research