If the information security ma… GREGORY EVANS 14 years ago If the information security manage wants to establish an information security governance framework, he/she should first: Gergory Evans