Governance – Establish and maintain a governance system with a clear assignment of roles and responsibilities and effective coordination mechanisms that integrates cybersecurity into the decision-making processes of the businesses.