Build an Information Security Strategy

Align the information security strategy to organizational goals and risks to create value.

The Situation

The rate of technological change is accelerating. Organizations continue to invest in technology to run the business, layering more systems to support remote work, enhance customer experience, and generate value.
Meanwhile, security threats are growing. Disruptive cyberattacks are more prevalent, sophisticated, and impactful than ever, targeting organizations of all industries and sizes.
Security leaders need to adopt a proactive approach to secure the organization now and prioritize funding to high-risk areas.

Build an Information Security Strategy visualization

Build a business-aligned, risk-aware, holistic security strategy:

Gather business requirements to prioritize improvements.
Assess risks, stakeholder expectations, and risk appetite to set meaningful targets.
Do a comprehensive gap analysis to identify improvements.
Build a flexible roadmap to set the program on the right footing.

Blueprint Contents

Build an Information Security Strategy – Phases 1-4
Information Security Requirements Gathering Tool
Information Security Pressure Analysis Tool
Information Security Program Gap Analysis Tool
Information Security Strategy Communication Deck
Information Security Charter

Member Testimonials

After each Info-Tech experience, we ask our members to quantify the real-time savings, monetary impact, and project improvements our research helped them achieve. See our top member experiences for this blueprint and what our clients have to say.

9.7/10

Overall Impact

$45,704

Average $ Saved

Average Days Saved

Member Testimonials
Client	Colorado Housing And Finance Authority
Experience	Guided Implementation
Impact	10/10
$ Saved	$23,800
Days Saved	26
Testimonial	It was a really helpful engagement and the level of support I received was best in industry. It was a really helpful engagement and the level of support I received was best in industry.

Member Testimonials
Client	City of Allen, TX
Experience	Guided Implementation
Impact	10/10
$ Saved	$34,000
Days Saved	20
Testimonial

Member Testimonials
Client	NanoXplore Inc
Experience	Guided Implementation
Impact	10/10
$ Saved	$10,000
Days Saved	10
Testimonial	Great support from Jon. Concrete actions. Great support from Jon. Concrete actions.

Member Testimonials
Client	Texas Tech University System
Experience	Guided Implementation
Impact	10/10
$ Saved	$27,880
Days Saved	20
Testimonial	Peter was fantastic and showed a great deal of commitment to us throughout the process. The primary contact was one of my staff members, which mad... Peter was fantastic and showed a great deal of commitment to us throughout the process. The primary contact was one of my staff members, which made this even more valuable because I was able to fully delegate to staff, although I remained involved throughout the engagement. Highly recommend Peter and grateful he was assigned to this self-paced initiative. Very positive outcome.

Member Testimonials
Client	Bioventus LLC
Experience	Guided Implementation
Impact	10/10
$ Saved	$136K
Days Saved	120
Testimonial	My overall experience with the guided implementation was great. Mike provided clear and effective direction throughout the engagement. He was highl... My overall experience with the guided implementation was great. Mike provided clear and effective direction throughout the engagement. He was highly informative and demonstrated deep expertise in the strategic approach. It was evident from our discussions that he has significant real-world experience in the areas we covered. He was well organized, communicated clearly and very responsive.

Member Testimonials
Client	Repligen Corporation
Experience	Guided Implementation
Impact	10/10
$ Saved	$34,000
Days Saved	50
Testimonial

Member Testimonials
Client	City Of Brampton
Experience	Guided Implementation
Impact	9/10
$ Saved	$10,000
Days Saved	20
Testimonial	Helped us to understand our current practice maturity and identify the gaps that need to be addressed to improve the maturing into the future. Helped us to understand our current practice maturity and identify the gaps that need to be addressed to improve the maturing into the future.

Member Testimonials
Client	Nunavut Arctic College
Experience	Workshop
Impact	9/10
$ Saved	$85,000
Days Saved	80
Testimonial	The topic of Security is complex, but Dave did an excellent job breaking it down in a way that was accessible and understandable. The Infotech mode... The topic of Security is complex, but Dave did an excellent job breaking it down in a way that was accessible and understandable. The Infotech model seems to be an effective approach to move away from the ad-hoc organic nature of addressing IT challenges. It provides significant insights into the current state of systems, which is a great starting point for improvements and further development.

Member Testimonials
Client	Oregon State University
Experience	Guided Implementation
Impact	9/10
$ Saved	$68,000
Days Saved	2
Testimonial	Good conversation, with ideas to get me moving again. Good conversation, with ideas to get me moving again.

Member Testimonials
Client	City of Santa Fe
Experience	Guided Implementation
Impact	10/10
$ Saved	N/A
Days Saved	50
Testimonial	There is no worst part of my experience. Jon Nelson is knowledgeable and professional. He walked me through the tools, and we were able to develo... There is no worst part of my experience. Jon Nelson is knowledgeable and professional. He walked me through the tools, and we were able to develop a comprehensive strategic plan, gap analysis, and road map to improve our security footprint. Thank you Jon!

Member Testimonials
Client	Planned Parenthood Federation of America
Experience	Workshop
Impact	10/10
$ Saved	$68,000
Days Saved	44
Testimonial

Member Testimonials
Client	Housing, Infrastructure & Communities Canada
Experience	Guided Implementation
Impact	9/10
$ Saved	$35,000
Days Saved	20
Testimonial

Member Testimonials
Client	Des Moines Water Works
Experience	Guided Implementation
Impact	10/10
$ Saved	$13,600
Days Saved	20
Testimonial	The best part was the knowledge and patience Isabelle had as I worked through the process. Time is always my biggest constraint and even working o... The best part was the knowledge and patience Isabelle had as I worked through the process. Time is always my biggest constraint and even working on things that save me time, still is difficult to schedule. Isabelle stuck with me for a long time and helped me see the process through. Very appreciative!

Member Testimonials
Client	HEALTH CARE COMPLAINTS COMMISSION
Experience	Guided Implementation
Impact	10/10
$ Saved	$7,200
Days Saved	8
Testimonial	Robert Dang performed at least four analyst calls with our Cyber Security Manager, each one estimated to have saved at least two days of time. The ... Robert Dang performed at least four analyst calls with our Cyber Security Manager, each one estimated to have saved at least two days of time. The best parts of this engagement were Robert's subject matter expertise & consultant skills - effectively engaging with our team, explaining key concepts, and, probably most beneficial of all, assisting with completing the blueprint templates. I still believe there is plenty of work to do here; however, due to internal resourcing constraints, we have had to postpone while key staff are on leave. Hoping to resume this when possible. I have no 'worst parts' of this engagement to describe. Very thankful to Robert and Info-Tech for this one.

Member Testimonials
Client	Ontario Medical Association
Experience	Workshop
Impact	10/10
$ Saved	$23,500
Days Saved	5
Testimonial	love the engagement and thoughtful and insightful prompts to ensure we stay focused and continue working towards strategy. love the engagement and thoughtful and insightful prompts to ensure we stay focused and continue working towards strategy.

Member Testimonials
Client	Vancouver Public Library
Experience	Workshop
Impact	9/10
$ Saved	$2,000
Days Saved	5
Testimonial	It was a well organized and productive workshop. Felt like we accomplished significant amount of work through the workshop. It was a well organized and productive workshop. Felt like we accomplished significant amount of work through the workshop.

Member Testimonials
Client	Fundación Universidad de las Américas Puebla
Experience	Guided Implementation
Impact	9/10
$ Saved	N/A
Days Saved	29
Testimonial	Jon was the best part, he has a welth of knowledge and is always eager to help, he directed the experience perfectly making it easy to understand a... Jon was the best part, he has a welth of knowledge and is always eager to help, he directed the experience perfectly making it easy to understand and to implement. The worst part would be that some of the tools have a lot of information but there's not enough time to go through it all (this is where Jon's guidance is invaluable) but you'll always have the feeling that some of the things you left out could have been of use and value.

Member Testimonials
Client	Unity Homes, Inc
Experience	Guided Implementation
Impact	10/10
$ Saved	$50,000
Days Saved	110
Testimonial	The best part of my experience working with Mike Brown was his unparalleled cybersecurity expertise and ability to tailor solutions to fit the spec... The best part of my experience working with Mike Brown was his unparalleled cybersecurity expertise and ability to tailor solutions to fit the specific needs of a small nonprofit organization like ours. His deep knowledge of the NIST and COBIT frameworks enabled us to develop a "right-sized" Security Strategy and Plan, saving our organization an estimated $40,000 and 105-120 days of research and development time. Mike's insights were not just theoretical but highly practical, ensuring immediate and sustainable impact. His communication style is clear and collaborative, making complex concepts accessible to all team members, regardless of technical background. As for 'Worst Parts:' Honestly, working with Mike had no significant negatives, if anything, the only challenge was coordinating schedules for extended virtual sessions due to time constraints on my end, but Mike was always flexible and accommodating throughout the process.

Member Testimonials
Client	State of Michigan
Experience	Workshop
Impact	9/10
$ Saved	$34,000
Days Saved	50
Testimonial	Working through the objectives with the coordinator. The coordinator was able to work through all points on contention and be fluid throughout the ... Working through the objectives with the coordinator. The coordinator was able to work through all points on contention and be fluid throughout the endeavor.

Member Testimonials
Client	Seattle Indian Health Board Inc
Experience	Guided Implementation
Impact	10/10
$ Saved	$34,000
Days Saved	50
Testimonial	Really good information and friendly analyst. A little overwhelming because there is so much to consider. Really good information and friendly analyst. A little overwhelming because there is so much to consider.

Member Testimonials
Client	Jamul Casino
Experience	Workshop
Impact	10/10
$ Saved	$13,600
Days Saved	29
Testimonial	Great workshop, highly recommended for any organization looking to develop a road map for their Security posture. Amazing Facilitator Horia Rosian,... Great workshop, highly recommended for any organization looking to develop a road map for their Security posture. Amazing Facilitator Horia Rosian, thank you for your time and valuable knowledge, it was pleasure working with you.

Member Testimonials
Client	Evommune, Inc.
Experience	Guided Implementation
Impact	9/10
$ Saved	$34,000
Days Saved	10
Testimonial

Member Testimonials
Client	Colorado Early Colleges
Experience	Guided Implementation
Impact	8/10
$ Saved	$13,600
Days Saved	2
Testimonial	Mike laid out the scope and needs very clearly. The worst part was realizing how much work remains to be done to reach the maturity level I want to... Mike laid out the scope and needs very clearly. The worst part was realizing how much work remains to be done to reach the maturity level I want to get to.

Member Testimonials
Client	The Corporation of the City of Kingston
Experience	Workshop
Impact	8/10
$ Saved	$25,000
Days Saved	20
Testimonial	Dave K is an excellent facilitator, providing meaningful direction and guidance to our team, keeping the sessions moving and on time. Dave K is an excellent facilitator, providing meaningful direction and guidance to our team, keeping the sessions moving and on time.

Member Testimonials
Client	City of Allen, TX
Experience	Guided Implementation
Impact	10/10
$ Saved	N/A
Days Saved	10
Testimonial

Member Testimonials
Client	Kruger Services Inc.
Experience	Guided Implementation
Impact	8/10
$ Saved	$10,000
Days Saved	5
Testimonial	Advice and ready to use tool was great. Advice and ready to use tool was great.

Member Testimonials
Client	University of Limpopo
Experience	Workshop
Impact	10/10
$ Saved	$60,000
Days Saved	60
Testimonial	The best parts were when the facilitator allowed the team to discover requirements and gaps on their own. He subtly resisted to giving the inputs ... The best parts were when the facilitator allowed the team to discover requirements and gaps on their own. He subtly resisted to giving the inputs himself but guided the participants to apply their own experiences and knowledge relative to own environment.

Member Testimonials
Client	Dufferin Peel Catholic District School Board
Experience	Guided Implementation
Impact	10/10
$ Saved	N/A
Days Saved	12
Testimonial

Member Testimonials
Client	The President and Fellows of Harvard College, a Massachusetts nonprofit corporation, acting by and through Harvard Business School
Experience	Workshop
Impact	10/10
$ Saved	$68,000
Days Saved	85
Testimonial	Outstandingworkshop and engagement. We learned a great deal, and flexibility was key. Facilitation was outstanding. Outstandingworkshop and engagement. We learned a great deal, and flexibility was key. Facilitation was outstanding.

Member Testimonials
Client	Wiss, Janney, Elstner Associates, Inc.
Experience	Guided Implementation
Impact	10/10
$ Saved	$68,000
Days Saved	120
Testimonial	I recently participated in an online workshop led by Petar, and it was an outstanding experience. Petar brings an incredible wealth of knowledge an... I recently participated in an online workshop led by Petar, and it was an outstanding experience. Petar brings an incredible wealth of knowledge and expertise in the security field, which became evident from the very start. For a small team like ours, having access to someone with his deep understanding and practical experience was invaluable. Throughout the workshop, Petar demonstrated remarkable patience, carefully walking us through each step of the process in great detail. His explanations were clear and methodical, making complex security concepts much easier to grasp. He tailored his approach to fit our specific challenges, taking the time to address concerns and questions along with providing practical next steps. In short, working with Petar was incredibly valuable. His expertise, patience, and tailored approach made the workshop not only informative but also highly applicable to our team’s day-to-day work

Member Testimonials
Client	Experience	Impact	$ Saved	Days Saved	Testimonial
Colorado Housing And Finance Authority	Guided Implementation	10/10	$23,800	26	It was a really helpful engagement and the level of support I received was best in industry. It was a really helpful engagement and the level of support I received was best in industry.
City of Allen, TX	Guided Implementation	10/10	$34,000	20
NanoXplore Inc	Guided Implementation	10/10	$10,000	10	Great support from Jon. Concrete actions. Great support from Jon. Concrete actions.
Texas Tech University System	Guided Implementation	10/10	$27,880	20	Peter was fantastic and showed a great deal of commitment to us throughout the process. The primary contact was one of my staff members, which mad... Peter was fantastic and showed a great deal of commitment to us throughout the process. The primary contact was one of my staff members, which made this even more valuable because I was able to fully delegate to staff, although I remained involved throughout the engagement. Highly recommend Peter and grateful he was assigned to this self-paced initiative. Very positive outcome.
Bioventus LLC	Guided Implementation	10/10	$136K	120	My overall experience with the guided implementation was great. Mike provided clear and effective direction throughout the engagement. He was highl... My overall experience with the guided implementation was great. Mike provided clear and effective direction throughout the engagement. He was highly informative and demonstrated deep expertise in the strategic approach. It was evident from our discussions that he has significant real-world experience in the areas we covered. He was well organized, communicated clearly and very responsive.
Repligen Corporation	Guided Implementation	10/10	$34,000	50
City Of Brampton	Guided Implementation	9/10	$10,000	20	Helped us to understand our current practice maturity and identify the gaps that need to be addressed to improve the maturing into the future. Helped us to understand our current practice maturity and identify the gaps that need to be addressed to improve the maturing into the future.
Nunavut Arctic College	Workshop	9/10	$85,000	80	The topic of Security is complex, but Dave did an excellent job breaking it down in a way that was accessible and understandable. The Infotech mode... The topic of Security is complex, but Dave did an excellent job breaking it down in a way that was accessible and understandable. The Infotech model seems to be an effective approach to move away from the ad-hoc organic nature of addressing IT challenges. It provides significant insights into the current state of systems, which is a great starting point for improvements and further development.
Oregon State University	Guided Implementation	9/10	$68,000	2	Good conversation, with ideas to get me moving again. Good conversation, with ideas to get me moving again.
City of Santa Fe	Guided Implementation	10/10	N/A	50	There is no worst part of my experience. Jon Nelson is knowledgeable and professional. He walked me through the tools, and we were able to develo... There is no worst part of my experience. Jon Nelson is knowledgeable and professional. He walked me through the tools, and we were able to develop a comprehensive strategic plan, gap analysis, and road map to improve our security footprint. Thank you Jon!
Planned Parenthood Federation of America	Workshop	10/10	$68,000	44
Housing, Infrastructure & Communities Canada	Guided Implementation	9/10	$35,000	20
Des Moines Water Works	Guided Implementation	10/10	$13,600	20	The best part was the knowledge and patience Isabelle had as I worked through the process. Time is always my biggest constraint and even working o... The best part was the knowledge and patience Isabelle had as I worked through the process. Time is always my biggest constraint and even working on things that save me time, still is difficult to schedule. Isabelle stuck with me for a long time and helped me see the process through. Very appreciative!
HEALTH CARE COMPLAINTS COMMISSION	Guided Implementation	10/10	$7,200	8	Robert Dang performed at least four analyst calls with our Cyber Security Manager, each one estimated to have saved at least two days of time. The ... Robert Dang performed at least four analyst calls with our Cyber Security Manager, each one estimated to have saved at least two days of time. The best parts of this engagement were Robert's subject matter expertise & consultant skills - effectively engaging with our team, explaining key concepts, and, probably most beneficial of all, assisting with completing the blueprint templates. I still believe there is plenty of work to do here; however, due to internal resourcing constraints, we have had to postpone while key staff are on leave. Hoping to resume this when possible. I have no 'worst parts' of this engagement to describe. Very thankful to Robert and Info-Tech for this one.
Ontario Medical Association	Workshop	10/10	$23,500	5	love the engagement and thoughtful and insightful prompts to ensure we stay focused and continue working towards strategy. love the engagement and thoughtful and insightful prompts to ensure we stay focused and continue working towards strategy.
Vancouver Public Library	Workshop	9/10	$2,000	5	It was a well organized and productive workshop. Felt like we accomplished significant amount of work through the workshop. It was a well organized and productive workshop. Felt like we accomplished significant amount of work through the workshop.
Fundación Universidad de las Américas Puebla	Guided Implementation	9/10	N/A	29	Jon was the best part, he has a welth of knowledge and is always eager to help, he directed the experience perfectly making it easy to understand a... Jon was the best part, he has a welth of knowledge and is always eager to help, he directed the experience perfectly making it easy to understand and to implement. The worst part would be that some of the tools have a lot of information but there's not enough time to go through it all (this is where Jon's guidance is invaluable) but you'll always have the feeling that some of the things you left out could have been of use and value.
Unity Homes, Inc	Guided Implementation	10/10	$50,000	110	The best part of my experience working with Mike Brown was his unparalleled cybersecurity expertise and ability to tailor solutions to fit the spec... The best part of my experience working with Mike Brown was his unparalleled cybersecurity expertise and ability to tailor solutions to fit the specific needs of a small nonprofit organization like ours. His deep knowledge of the NIST and COBIT frameworks enabled us to develop a "right-sized" Security Strategy and Plan, saving our organization an estimated $40,000 and 105-120 days of research and development time. Mike's insights were not just theoretical but highly practical, ensuring immediate and sustainable impact. His communication style is clear and collaborative, making complex concepts accessible to all team members, regardless of technical background. As for 'Worst Parts:' Honestly, working with Mike had no significant negatives, if anything, the only challenge was coordinating schedules for extended virtual sessions due to time constraints on my end, but Mike was always flexible and accommodating throughout the process.
State of Michigan	Workshop	9/10	$34,000	50	Working through the objectives with the coordinator. The coordinator was able to work through all points on contention and be fluid throughout the ... Working through the objectives with the coordinator. The coordinator was able to work through all points on contention and be fluid throughout the endeavor.
Seattle Indian Health Board Inc	Guided Implementation	10/10	$34,000	50	Really good information and friendly analyst. A little overwhelming because there is so much to consider. Really good information and friendly analyst. A little overwhelming because there is so much to consider.
Jamul Casino	Workshop	10/10	$13,600	29	Great workshop, highly recommended for any organization looking to develop a road map for their Security posture. Amazing Facilitator Horia Rosian,... Great workshop, highly recommended for any organization looking to develop a road map for their Security posture. Amazing Facilitator Horia Rosian, thank you for your time and valuable knowledge, it was pleasure working with you.
Evommune, Inc.	Guided Implementation	9/10	$34,000	10
Colorado Early Colleges	Guided Implementation	8/10	$13,600	2	Mike laid out the scope and needs very clearly. The worst part was realizing how much work remains to be done to reach the maturity level I want to... Mike laid out the scope and needs very clearly. The worst part was realizing how much work remains to be done to reach the maturity level I want to get to.
The Corporation of the City of Kingston	Workshop	8/10	$25,000	20	Dave K is an excellent facilitator, providing meaningful direction and guidance to our team, keeping the sessions moving and on time. Dave K is an excellent facilitator, providing meaningful direction and guidance to our team, keeping the sessions moving and on time.
City of Allen, TX	Guided Implementation	10/10	N/A	10
Kruger Services Inc.	Guided Implementation	8/10	$10,000	5	Advice and ready to use tool was great. Advice and ready to use tool was great.
University of Limpopo	Workshop	10/10	$60,000	60	The best parts were when the facilitator allowed the team to discover requirements and gaps on their own. He subtly resisted to giving the inputs ... The best parts were when the facilitator allowed the team to discover requirements and gaps on their own. He subtly resisted to giving the inputs himself but guided the participants to apply their own experiences and knowledge relative to own environment.
Dufferin Peel Catholic District School Board	Guided Implementation	10/10	N/A	12
The President and Fellows of Harvard College, a Massachusetts nonprofit corporation, acting by and through Harvard Business School	Workshop	10/10	$68,000	85	Outstandingworkshop and engagement. We learned a great deal, and flexibility was key. Facilitation was outstanding. Outstandingworkshop and engagement. We learned a great deal, and flexibility was key. Facilitation was outstanding.
Wiss, Janney, Elstner Associates, Inc.	Guided Implementation	10/10	$68,000	120	I recently participated in an online workshop led by Petar, and it was an outstanding experience. Petar brings an incredible wealth of knowledge an... I recently participated in an online workshop led by Petar, and it was an outstanding experience. Petar brings an incredible wealth of knowledge and expertise in the security field, which became evident from the very start. For a small team like ours, having access to someone with his deep understanding and practical experience was invaluable. Throughout the workshop, Petar demonstrated remarkable patience, carefully walking us through each step of the process in great detail. His explanations were clear and methodical, making complex security concepts much easier to grasp. He tailored his approach to fit our specific challenges, taking the time to address concerns and questions along with providing practical next steps. In short, working with Petar was incredibly valuable. His expertise, patience, and tailored approach made the workshop not only informative but also highly applicable to our team’s day-to-day work

ITRG Provides Proven Results for IT Leaders

30,000+

ITRG members spanning the Global 2000

$400M+

Cut from IT costs with our pricing intelligence and advisory support

+8%

Increase in stakeholder satisfaction where IT leaders used Info-Tech services

9.5/10

Member-related value across +50,000 analyst calls, workshops and projects

About Info-Tech Research Group

Info-Tech Research Group is the world’s fastest-growing information technology research and advisory company, proudly serving over 30,000 IT professionals.

We produce unbiased and highly relevant research to help CIOs and IT leaders make strategic, timely, and well-informed decisions. We partner closely with IT teams to provide everything they need, from actionable tools to analyst guidance, ensuring they deliver measurable results for their organizations.

Our Offices

Arlington, VA

1225 South Clark Street, Suite 1310

Arlington, VA, USA
22202

Las Vegas, NV

3960 Howard Hughes Parkway, Suite 500

Las Vegas, NV, USA
89169

London, ON

345 Ridout Street North

London, ON, Canada
N6A 2N8

London, UK

10 York Road, Suite 5W127

London, United Kingdom
SE1 7ND

Singapore

71 Robinson Road, #14-130

Singapore
068895

Sydney, NSW

320 Pitt Street, Level 6

Sydney, NSW, Australia
2000

Toronto, ON

888 Yonge Street

Toronto, ON, Canada
M4W 2J2