Rational Cybersecurity for Business: The Security Leaders' Guide to Business Alignment

© The Author(s) 2020

D. BlumRational Cybersecurity for Businesshttps://doi.org/10.1007/978-1-4842-5952-8_2

2. Identify and Align Security-Related Roles

Dan Blum¹ 

(1)

Silver Spring, MD, USA

 

Most technical security controls, or processes, do little without people in control. Firewalls require administrators to install and configure them. Access request systems need managers to review who should have access to the target application or database. Secure software coding depends almost entirely on the coders learning the right practices and testing or scanning tools. Everyone in the business has some part to play. Therefore, this chapter introduces some core concepts that Chapters 3 and 4 will build on to describe how businesses can improve security governance ...