objectives of information security?

 The primary objective of the information security program is to implement the strategy in the most cost effective manner while at the same time maximizing support of business functions and minimizing operational disruptions. In Information Security Governance (ISG) and Information Risk Management (IRM) the governance and risk objectives for a security program were defined and incorporated into an overall strategy.


The level of understanding that candidates need to have obtained in ISG and IRM will determine the degree of clarity in understanding information security program development objectives. For example, if candidates are able to come up with a well-developed security strategy, it would be less stressful for them to turn a high-level strategy into a meaningful, logical and physical reality.

Despite a well-formed security strategy, candidates must be able and prepared to modify or reconsider certain elements during the program design, development and administration, depending on the circumstances. This could result in a change in business requirements, underlying infrastructure, topology or even technologies used.


Comments

Popular posts from this blog

Everything You Need to Know About 5G

Network Security: LAN manager authentication level

Five technology trends for 2019