Governance is the term that umbrellas all the policies, methods, and controls used by an organization seeking certification (OSC) to ensure long-term viability and continuous improvement in the detection, prevention, and quick reaction to cyber threats and issues.