The Security Risk Assessment Handbook, 2nd Edition

Administrative Data Gathering  ◾  195

© 2011 by Taylor & Francis Group, LLC

e security sta, after all, is the team responsible for the selection, application, and

maintenance of the security controls within the organization. e composition and

placement of this team within the assessed organization greatly aects the security

posture of the organization.

e rise of threats to information assets and the development of information

security regulations have led to a much greater appreciation for a strong informa-

tion security capability within the organization. e way in which this capability

is implemented in the organization can take many forms. Some organizations have

created security teams, while others have appointed Chief Security Ocer ...