Governing for Enterprise Security (GES) Implementation Guide Article 1: Characteristics of Effective Security Governance1
• SEI Report
Publisher
Software Engineering Institute
Topic or Tag
Abstract
This article sets the stage for the Governing for Security Implementation Guide series. It first presents several key definitions for enterprise governance, IT governance, and security governance. It describes eleven characteristics intended to answer the question "How would I know effective security governance if I saw it?" The article goes on to compare and contrast both effective and ineffective security governance actions and then describes ten key challenges that leaders need to anticipate and address.
Cite This SEI Report
Allen, J., & Westby, J. (2007, February 5). Governing for Enterprise Security (GES) Implementation Guide Article 1: Characteristics of Effective Security Governance1. Retrieved August 17, 2026, from https://www.sei.cmu.edu/library/governing-for-enterprise-security-ges-implementation-guide-article-1-characteristics-of-effective-security-governance1/.
@techreport{allen_2007,
author={Allen, Julia and Westby, Jody},
title={Governing for Enterprise Security (GES) Implementation Guide Article 1: Characteristics of Effective Security Governance1},
month={Feb},
year={2007},
institution={Software Engineering Institute, Carnegie Mellon University},
url={https://www.sei.cmu.edu/library/governing-for-enterprise-security-ges-implementation-guide-article-1-characteristics-of-effective-security-governance1/},
note={Accessed: 2026-Aug-17}
}
Allen, Julia, and Jody Westby. "Governing for Enterprise Security (GES) Implementation Guide Article 1: Characteristics of Effective Security Governance1." Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, February 5, 2007. https://www.sei.cmu.edu/library/governing-for-enterprise-security-ges-implementation-guide-article-1-characteristics-of-effective-security-governance1/.
J. Allen, and J. Westby, "Governing for Enterprise Security (GES) Implementation Guide Article 1: Characteristics of Effective Security Governance1," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, 5-Feb-2007 [Online]. Available: https://www.sei.cmu.edu/library/governing-for-enterprise-security-ges-implementation-guide-article-1-characteristics-of-effective-security-governance1/. [Accessed: 17-Aug-2026].
Allen, Julia, and Jody Westby. "Governing for Enterprise Security (GES) Implementation Guide Article 1: Characteristics of Effective Security Governance1." Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 5 Feb. 2007. https://www.sei.cmu.edu/library/governing-for-enterprise-security-ges-implementation-guide-article-1-characteristics-of-effective-security-governance1/. Accessed 17 Aug. 2026.
Allen, Julia; & Westby, Jody. Governing for Enterprise Security (GES) Implementation Guide Article 1: Characteristics of Effective Security Governance1. Software Engineering Institute. 2007. https://www.sei.cmu.edu/library/governing-for-enterprise-security-ges-implementation-guide-article-1-characteristics-of-effective-security-governance1/