Whilst no longer supported has good information on enabling the business to embed cyber security.
(Pages 11 - 14) https://www.ncsc.gov.uk/static-assets/documents/GPG 28 -Improving IA at the Enterprise Level - issue 1.3 - Oct 15 - NCSC Web.pdf
HMG IA Maturity Model (IAMM) - His Majesty’s Government Information Assurance Maturity Model