A newly appointed chief information security officer (CISO) has been asked to explain the purpose of information security management to the board. Which explana...