Information Security Handbook

Develop your information security program strategy

To ensure that you are developing a holistic business-aligned information security program, you need to take the time to establish an information security program strategy. You should establish clear and concise strategy goals that will help you in your future program planning.

Examples of strategic goals your organization can use include:

• Information security risk assessment: Provide for the periodic review of information security risks and implement appropriate responses
• Information security governance: Establish a governance function to provide information concerning information security assurance to management, assisting them in making decisions concerning risk
• Information security operations ...