The Security Risk Assessment Handbook, 2nd Edition

1

© 2011 by Taylor & Francis Group, LLC

Chapter 1

Introduction

1.1  The Role of the Information Security Manager

For those responsible for information security within their organization there are a

clear set of responsibilities. ese include

◾ Preventing loss, fraud, and sensitive data breaches

◾ Demonstrating regulation compliance

◾ Managing security policies

◾ Ensuring business continuity

◾ Planning incident and disaster response, and

◾ Prioritizing security initiatives

ere can be some debate as to the inclusion of these responsibilities with all infor-

mation security managers or ocers as organizational structures may place respon-

sibility of ...