Governance of Enterprise Security: CyLab 2012 Report
www.rsa.com/innovation/docs/CMU-GOVERNANCE-RPT-2012-FINAL.pdf