Information Security Steering Committee Charter

Author(s): Daniel Black , Logan Rohde

Without a charter, the steering committee’s value, scope, and success criteria are unclear to participants, resulting in unrealistic stakeholder expectations and poor organizational acceptance.

  • Formalize a RACI chart that demonstrates who is responsible for what.
  • Document purpose, scope, etc. of the steering committee to ensure accountability.

Use this phase as part of the full blueprint, Improve Security Governance with a Security Steering Committee.