Information Assurance Handbook: Effective Computer Security and Risk Management Strategies

CHAPTER 1

Developing an Information Assurance Strategy

The information assurance strategy presented is based on ten core principles, as shown in Figure 1-1. The principles fulfill the information assurance requirements and objectives of the majority of organizations. The size, complexity, and organizational environment will drive the relative importance of each of the principles.

Figure 1-1 Information assurance strategy principles

Comprehensive

An organization’s information assurance strategy and resulting policies and programs should cover topics, areas, and domains needed for modern organizations. Each topic, domain, and area within a policy ...