Security governance must be enforced at all levels of an organization. But many still do not understand quite what security governance is, what is its main objective, and how it should be integrated within existing structures in an organization.

"Governance". briefly state

(a) what governance is from a security perspective,

(b) it's the main objective, and (c) how should it be integrated into an organization.