Executive Guide to Information Security, The: Threats, Challenges, and Solutions

Design of Your Future Organization

Now that you have developed a baseline of your existing organization, you are in a better position to plan for the future. You will use the information security framework and the same categories of strategy, components, and administration to drive the design process.

People Strategy

For any security program to be successful, designated people must be trained in and held accountable for security. It's time to step back and take a holistic view of your security organization. Working from your baseline assessment, you should focus on hiring and organizing your personnel. Assembling your security “dream team” can take as little as six months or more than a year, but you can begin building the framework for it today. ...