https://www.sans.org/media/critical-security-controls/Poster_CIS-Security-Controls_2018.pdf
The best practice guide for an effective infoSec function
Five Keys for Building a Security program
Open a PDF file Five Keys for Building a Security Program.