COBIT 2019 Design and Implementation

Information flows, together with the security policy governing them, define important exposure paths and required controls within an organization’s threat landscape.