Communicate to and request feedback from Senior Management
The status of your information security program, measured KPI's and the result of internal and external audits are valuable information to the business. Communicate and request feedback to your senior management regularly.
Senior management will provide you with guidance with respect to changes to the business, changes in the risk appetite, updates to policies and procedures.
Requesting feedback from Senior Management will allow for the periodic evaluation of the different processes and implementing of the actions necessary to achieve the desired outcome and improvement.