Governing for Enterprise Security Implementation Guide: Sample Artifact Roles and Responsibilities for an Enterprise Security Program
• SEI Report
Publisher
Software Engineering Institute
Topic or Tag
Abstract
This sample artifact describes the leadership roles and responsibilities for the development, implementation, and sustainment of an enterprise security program (ESP), as identified in Article 2: Defining an Effective Enterprise Security Program, Table 1, and Article 3: Enterprise Security Governance Activities.
This artifact is not meant to stand alone — rather, it should be interpreted in the context of these articles. We hope business leaders will find it useful as an aid in building a governance-based security program.
Cite This SEI Report
Software Engineering Institute (2007, July 11). Governing for Enterprise Security Implementation Guide: Sample Artifact Roles and Responsibilities for an Enterprise Security Program. Retrieved August 17, 2026, from https://www.sei.cmu.edu/library/governing-for-enterprise-security-implementation-guide-sample-artifact-roles-and-responsibilities-for-an-enterprise-security-program/.
@techreport{Citekey_2007,
author={Software Engineering Institute},
title={Governing for Enterprise Security Implementation Guide: Sample Artifact Roles and Responsibilities for an Enterprise Security Program},
month={Jul},
year={2007},
institution={Software Engineering Institute, Carnegie Mellon University},
url={https://www.sei.cmu.edu/library/governing-for-enterprise-security-implementation-guide-sample-artifact-roles-and-responsibilities-for-an-enterprise-security-program/},
note={Accessed: 2026-Aug-17}
}
Software Engineering Institute. "Governing for Enterprise Security Implementation Guide: Sample Artifact Roles and Responsibilities for an Enterprise Security Program." Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, July 11, 2007. https://www.sei.cmu.edu/library/governing-for-enterprise-security-implementation-guide-sample-artifact-roles-and-responsibilities-for-an-enterprise-security-program/.
Software Engineering Institute, "Governing for Enterprise Security Implementation Guide: Sample Artifact Roles and Responsibilities for an Enterprise Security Program," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, 11-Jul-2007 [Online]. Available: https://www.sei.cmu.edu/library/governing-for-enterprise-security-implementation-guide-sample-artifact-roles-and-responsibilities-for-an-enterprise-security-program/. [Accessed: 17-Aug-2026].
Software Engineering Institute. "Governing for Enterprise Security Implementation Guide: Sample Artifact Roles and Responsibilities for an Enterprise Security Program." Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 11 Jul. 2007. https://www.sei.cmu.edu/library/governing-for-enterprise-security-implementation-guide-sample-artifact-roles-and-responsibilities-for-an-enterprise-security-program/. Accessed 17 Aug. 2026.
Software Engineering Institute. Governing for Enterprise Security Implementation Guide: Sample Artifact Roles and Responsibilities for an Enterprise Security Program. Software Engineering Institute. 2007. https://www.sei.cmu.edu/library/governing-for-enterprise-security-implementation-guide-sample-artifact-roles-and-responsibilities-for-an-enterprise-security-program/