Design a security program using an approach referred to as Information Security Governance such that Information security objectives must be addressed at the highest levels of an organization's management team in order to be effective. Also include report patterns from the various layers of management on the InfoSec programs effectiveness and adequacy

I need a program as a reference.

thanks in advance.