Program Governance and Structure Governance of the Information Security program begins with the IT Risk Governance Subcommittee, whose objective is to protect the integrity, security, safety, and resiliency of corporate information systems and assets.