function at a strategic level to address the information security requirements of financial companies with global, networked applications and information technology infrastructures
address and align information security priorities and concerns of multiple constituencies
approach information security and risk management as business enablers
