The Security Risk Assessment Handbook, 2nd Edition

Administrative Data Gathering  ◾  155

© 2011 by Taylor & Francis Group, LLC

of security controls. From security regulations compliance responsibilities to secu-

rity activity coordination and execution, the eectiveness and eciency of security

controls can be thwarted by weak organizational structure controls.

6.1.2.1 Senior Management

All security starts at the top. It is senior management that is ultimately respon-

sible for the security of an organization. It is senior management that will be held

accountable by the organization’s stakeholders and for violation of laws and regu-

lations. It is senior management that determines the organizational structure in

which the security program and activities operate. If senior management does not

est ...