Cost effective management security and control

摘要

The author outlines how security projects can go wrong. Shendetails an approach which is both practical and proven to work inneffectively designing security solutions to any IT systems. The approachnis made up of five component stages: establish baseline securitynfactors; identify constraints; identify and analyse the business and ITnrisks; recommend countermeasures to reduce identified risk factorsn(appropriate at either global or local level); and regularly update asnbusiness and IT changes