Part 4: Enterprise Information Security Compliance Program Establish an enterprise information security compliance program that addresses the concerns of the board of directors of the organization in which you describe specific plans and control objectives that could be adopted to address the known issues. Suggest at least three information security policies that could be developed and practiced within the organization for data security assurance. Outline the steps you would take to define the security needs of the organization in terms of duties, staffing, training, and processes.