Governing for Enterprise Security (GES) Implementation Guide Article 3: Enterprise Security Governance Activities
• SEI Report
Publisher
Software Engineering Institute
Topic or Tag
Abstract
This article elaborates the description of an enterprise security program (ESP) discussed in Article 2: Defining an Effective Enterprise Security Program. It closely examines the governance elements of an ESP, including who is involved, their roles and responsibilities, governance activities required to implement an ESP, and a description of these activities.
Cite This SEI Report
Westby, J., & Allen, J. (2007, March 5). Governing for Enterprise Security (GES) Implementation Guide Article 3: Enterprise Security Governance Activities. Retrieved September 21, 2026, from https://www.sei.cmu.edu/library/governing-for-enterprise-security-ges-implementation-guide-article-3-enterprise-security-governance-activities/.
@techreport{westby_2007,
author={Westby, Jody and Allen, Julia},
title={Governing for Enterprise Security (GES) Implementation Guide Article 3: Enterprise Security Governance Activities},
month={Mar},
year={2007},
institution={Software Engineering Institute, Carnegie Mellon University},
url={https://www.sei.cmu.edu/library/governing-for-enterprise-security-ges-implementation-guide-article-3-enterprise-security-governance-activities/},
note={Accessed: 2026-Sep-21}
}
Westby, Jody, and Julia Allen. "Governing for Enterprise Security (GES) Implementation Guide Article 3: Enterprise Security Governance Activities." Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, March 5, 2007. https://www.sei.cmu.edu/library/governing-for-enterprise-security-ges-implementation-guide-article-3-enterprise-security-governance-activities/.
J. Westby, and J. Allen, "Governing for Enterprise Security (GES) Implementation Guide Article 3: Enterprise Security Governance Activities," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, 5-Mar-2007 [Online]. Available: https://www.sei.cmu.edu/library/governing-for-enterprise-security-ges-implementation-guide-article-3-enterprise-security-governance-activities/. [Accessed: 21-Sep-2026].
Westby, Jody, and Julia Allen. "Governing for Enterprise Security (GES) Implementation Guide Article 3: Enterprise Security Governance Activities." Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 5 Mar. 2007. https://www.sei.cmu.edu/library/governing-for-enterprise-security-ges-implementation-guide-article-3-enterprise-security-governance-activities/. Accessed 21 Sep. 2026.
Westby, Jody; & Allen, Julia. Governing for Enterprise Security (GES) Implementation Guide Article 3: Enterprise Security Governance Activities. Software Engineering Institute. 2007. https://www.sei.cmu.edu/library/governing-for-enterprise-security-ges-implementation-guide-article-3-enterprise-security-governance-activities/