9 COMMUNICATION, CONSULTATION, MONITORING and REVIEW

Before we examine the requirements for communication, consultation, monitoring and review within an information risk management programme, let us take a few moments to examine the kinds of skills an information risk programme manager will require. These include:

  • Business skills. A sound knowledge of the organisation’s business is essential when commencing an impact assessment. This will include not only an understanding of the key activities, products and services, but also how the organisation goes about its business including areas such as sales and marketing, order processing and fulfilment, procurement, manufacturing, finance and human resources.
  • Technical skills. Although the person ...

Get Information Risk Management: A practitioner’s guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.