INTRA/GV/GV003Cross-functional governance body
The standing body in which the functions a program touches meet and decide together: security, human resources, legal, compliance, and technology. What makes it this measure rather than a mailing list is that it decides, and that it decides in one room rather than one function at a time.
| Control | Jurisdiction | Source | What it establishes | Prerequisite or recommendation |
|---|---|---|---|---|
| Recommended | United Kingdomwhere written | Insider Risk Practitioners and StakeholdersNPSA · read 29 Aug 2026 | That a program needs a senior stakeholder group drawn from named functions, and a director who carries the board’s strategy into policy. | The group is named and its membership drawn: physical and information security, technology, human resources, vetting, facilities, contracts, procurement, finance, counter fraud, legal, training, communications, and a staff or trade union representative. What the group decides is not stated. |