I’ve been interviewing candidates lately helping clients fill information security leadership roles. Sometimes when I need to baseline the candidate, I’ll ask them to list for me all the elements of a good information security program, or variations thereof.

So here’s a quick list of elements of a good infosec program, in no particular order. Some are mo…