Learn in the textbookOrganizational Structure for Promoting Security
DefinitionAn information security committee (情報セキュリティ委員会) is a deliberative body in which senior management and department heads meet to discuss and decide the organization-wide information security policy and its key measures.
ExplanationThe chair is often a senior executive or the CISO (chief information security officer), and the policies it agrees on are approved by top management and then passed down to each department and to the teams that carry out the work. The committee receives reports on how the measures are being implemented and revises the policy or measures when needed.
AnalogyThink of a school staff meeting. The teachers get together to set the school rules and the plan for the year, but the actual lessons are still taught by each class teacher in their own classroom.