Executive Guide to Information Security, The: Threats, Challenges, and Solutions

People—Components

At some point, you might decide to create a formal information security organization. A dedicated information security organization has the inherent advantage of focusing individuals on specific areas, such as managing a security awareness program or monitoring program compliance. Having the right team in place can make all the difference in your program's success.

Hiring and Developing Your Team

Information security professionals are in high demand today. If you decide to develop an in-house information security organization, you need to be willing to invest the time and money necessary to attract, develop, and retain these employees. If you aren't willing or are unable to make the necessary investment at this time, you might ...