Communicate to and request feedback from Senior Management
The status of your Information Security Program, Measured KPI's and result of internal and external Audit are valuable information the the business. Communicate and request feedback to your Senior Management regularly.
Senior Management will provide you with direction in respect to changes to the business, changes in the risk appetite, updates to policies and procedures.
Requesting feedback from Senior Management will allows for the periodic evaluation of the different processes and implementing of the actions necessary to achieve the planned outcomes and improvements.