Information Security Handbook

How mature is your organization?

The maturity of your organization will directly impact the progress that you will be able to make regarding the planning and implementation of your information security program.

In the following list, you will find some questions that will help you to think about your organization's current maturity. You will want to ask yourself similar questions to determine where you are staring from when planning your information security program.

Where is your organization now?

• People:
  • Does your organization have an existing information security capability? What is that capability?
  • Is this capability technical in nature only or does information security have a relationship with the business users?
• Process:
  • Is your ...