A description of the structure and behavior for an enterprise's security processes, information security systems, personnel and organizational sub- units, showing their alignment with the enterprise's mission and strategic plans.
Sources:
CNSSI 4009-2022