SoftwareCo is a small boutique company that provides customised software solutions to large companies in Australia and internationally. SoftwareCos CEO has recently been notified of a large sum of money which is missing from end of financial year reports. The person responsible, an executive on the board of directors, has been charged with fraud and ordered to give the money back. The CEO believes this situation may have been avoided if the company had invested earlier in setting up a security governance policy.

Using your knowledge of CIA security goals and data governance, make recommendations on how to implement good security protocols and processes. Please clearly state any assumptions you make.