The Business Case For Network Security: Advocacy, Governance, And Roi

Chapter 11. Security Is a Living Process

Individuals charged with developing a business case for network security quickly understand that security is a living challenge that must be continually reviewed. Potential threats lurk everywhere and include hackers external to a company, hackers internal to a company, sloppy or ill-informed users, and extranet-partnered customers or suppliers. All have the ability to pose threats that can go beyond computing systems, potentially resulting in legal implications for certain organizations.

Making the business case for network security requires a thorough analysis of an organization’s fundamentals. It should attempt to solidify strengths, root out weaknesses, uncover opportunities, and confront threats. ...