9 COMMUNICATION, CONSULTATION, MONITORING and REVIEW
Before we examine the requirements for communication, consultation, monitoring and review within an information risk management programme, let us take a few moments to examine the kinds of skills an information risk programme manager will require. These include:
- Business skills. A sound knowledge of the organisation’s business is essential when commencing an impact assessment. This will include not only an understanding of the key activities, products and services, but also how the organisation goes about its business including areas such as sales and marketing, order processing and fulfilment, procurement, manufacturing, finance and human resources.
- Technical skills. Although the person ...