Discuss the three principles that high-level security frameworks like the EBK employ.

What will be an ideal response?

High-level security frameworks like the EBK employ three principles. The first principle really just represents good business practice and states that the collective body of knowledge within the profession can be tapped for expert advice about the best way to deal with a practical concern. The practice recommendations of the EBK embody that type of advice. The second principle is governance, which simply describes the generic organizing and control function that underwrites any form of good management. The governance function integrates every aspect of security practice into a single substantive, continuously evolving control-based model. The final principle, continuous assurance, implies the need for an explicitly documented organization-wide audit and review strategy.