Information Security Governance  Compliance management vs operational management
This paper discusses the difference that should exist between Information Security Operational Management and Information Security Compliance Management. The paper argues that for good Information Security Governance, good IT Governance and good Corporate Governance, these two dimensions of Information Security Management should be totally separate, and housed in separate departments.
information security compliance management operational management corporate governance information security management information technology governance risk management