Reading list: Management of information security 
The chapter of Governance and Strategic planning for security