COBIT is an IT Controls and Governance framework developed and maintained by ISACA. The current version is COBIT 2019. Further reading COBIT - Wikipedia

Code review is a quality control process in software development where a second reviewer examines code changes to identify potential defects and to improve overall code quality. Further reading Code Review Guide (OWASP) (PDF) Code review (Wikipedia) Security-Oriented Code Review (NIST)

Continuous Threat Exposure Management (CTEM) is a way of looking at cybersecurity risk through the lens of “what could really hurt us, and how do we stay ahead of it?” Instead of one-off assessments or annual tests, CTEM is a continuous cycle that helps technology leaders see where the organisation is exposed, judge which issues matter most, and act before attackers do. CTEM runs through five stages: Scoping — deciding which parts of the business or technology estate to focus on. Discovery — identifying the vulnerabilities, misconfigurations, or exposures in that scope Prioritisation — weighing which findings actually matter, based on business impact and likelihood Validation — testing whether the exposure is real and exploitable, avoiding wasted effort. Mobilisation — taking action, whether that’s fixing, monitoring, or planning mitigations. Together, these stages create a loop of constant visibility and improvement, helping executives translate technical risks into business decisions and resource allocation. ...

Corporate governance addresses the fundamental problem of how to ensure that those who manage a company act in the best interests of its owners, known as the agency problem. It is the system of rules, practices, and processes designed to align the interests of management with those of shareholders and other stakeholders, promoting accountability, transparency, and responsible decision-making. Effective corporate governance is essential for building trust, attracting investment, and fostering long-term sustainable growth. ...