If the information security ma… GREGORY EVANS 15 years ago If the information security manage wants to establish an information security governance framework, he/she should first: Gergory Evans