Principle-Based Policy Governance aligns organizational expectations to mature and widely available standards while reducing the need for existing and legacy opinion-driven policy practices. We will define Principle-Based Policy Governance, identify its benefits, and review successful implementation.

Learning Objectives:

• Learn how to align your cybersecurity program to recognized and mature cybersecurity standards, such as the NIST Cybersecurity Framework and CIS Controls
• Learn how to replace opinion-based cybersecurity practices with a program aligned to a widely accepted and mature framework
• Learn how to integrate organizational principles and expectations throughout an organization, from board members to subject matter expert (Information Technology Administrators).

Adam Nunn, Senior Principal Consultant, Clearwater