specified by international standards such as COBIT (Control Objectives for Information and related Technology), ISO Security Governance) or ISO 38500 (Governance of Information Technology), are managed through a three-tier structure: ∫ Comprehensive corporate security governance.