Need help? Our Trial Membership program will get you help on any IT project you're working on. You'll get access to our research, tools, advice and project help. Start your free trial membership now:
Want to learn more about our membership options, pricing, or to get a product demo?
Get in touch with one of our reps using an option below.
Lifecycle: Learn Trends and Develop Strategy > Strategize: Strategy and Planning, Improve IT Operations > Operate: Operate and Optimize
Last Revised: 2011-07-26
Your Challenge
Enterprise security is a complex topic, and often a costly proposition. Many IT security leaders face the constant uphill battle of struggling to retain budget in the face of increasing threats, and the mounting tool counts required to deal with them.
Though generally addressed with IT solutions, enterprise security is a business issue and must be looked at that way; poor enterprise security undermines business viability while appropriate enterprise security can be a business enabler.
IT and business leaders need to work together to come to a consensus around the business value of enterprise security so that justification becomes a holistic conversation rather than a scrambling for dollars for each new threat.
An enterprise-wide push to reduce operating costs may lead to mandated budget reductions for IT. For some enterprises, this means reviewing the Disaster Recovery Plan (DRP) and putting IT security expenses under a cost management lens. Learn how to reduce the Cost-to-Serve of IT risk management services without putting the business in jeopardy.
A Security Plan is the formal document that indicates both the security solutions that the enterprise will deploy to protect its information assets as well as the order in which they will be deployed. Building Security Plans is shown to increase enterprise security while reducing security spend, but development costs, on average, over $100,000 and takes eight months. This storyboard explains what a Security Plan is and why it is valuable, as well as how a Security Architecture and Security Implementation Roadmap should be built.
The development and deployment of an enterprise Security Policy that defines the what and how of enterprise security is now mandated by numerous regulatory and industry standards, such as HIPAA and PCI-DSS. The development of a Security Policy, however, generally takes specialized skills that most organizations do not have. As a result, the process either takes a significant amount of time, or a significant amount of money.