Executive Guide to Information Security, The: Threats, Challenges, and Solutions

Enterprise Information Security Program

Three major components form the core of any information security program. Many people are involved in an enterprise information security program, and everyone plays an important role. Processes guide employees in the performance of their duties and give specific guidelines for securing your enterprise. Technology is also a key component of the program. Companies do much of their business electronically, which exposes them to additional threats. The following sections explain these components and their roles in your security program in detail.

Enterprise Security—People

Key factors to consider when creating the appropriate information security organization for your company include company size, business ...