Information Security Handbook

Executive or board support

A key aspect of the success of your information security program is developing a strong relationship with your organization's senior leadership. Without the commitment from your organization's senior leadership, the information security program will most likely be ineffective. Information security is really about organizational change. When a new information security program is established within an organization, changes will occur across the spectrum of people, processes, and technology. These changes could potentially be seen as disruptive to the way things are normally done. Without strong executive support for the information security programs, it may be difficult to make the necessary changes.

It is important ...