information security control

and between business cio ciso control controls design diagram information intersection matrix objectives placed relation responsibilities risk scope security should showing the view where