by David Lam | The only way to ensure that the information in the possession of your organization is appropriately protected is for the executive leadership of your organization to be proactively engaged in managing your information security efforts. To be practicing governance.