Executive Guide to Information Security, The: Threats, Challenges, and Solutions

Information Security Existing Program Evaluation Summary Example

Program Component	Score	Comments
People
Strategy	7	No formal strategy exists today
Components	8	Staff focused on day-to-day firefighting
Administration	9	Minimal involvement of executive staff
People Score	24
Process
Strategy	10	Informal policies that are not followed consistently
Components	9	Policies are not easily accessed by employees
Administration	7	All major security policies have been considered in program
Process Score	26
Technology
Strategy	6	No technology architecture is in place, and changes are tactical in nature
Components	10	Major technology components have been deployed
Administration	10	Informal program to protect environments from security threats
Technology Score	26
Overall Average Rating ...