This chapter is about the governance relating to the information security cycle, encryption and quantum computing. It starts out with providing an overview of the rules relating to the taking of measures in the information security cycle, and the continues with a discussion of the breaking of those measures. It then focuses on the different governance approaches with regard to encryption. It ends with the limited governance relating to quantum computing. This exercise is all intended to create an inventory of the gaps in governance relating to these three domains, which can then be used for further assessment under the relevant human rights frameworks.