Rants
Questions
Soapbox
Best Practices
NEWSLETTERS
SUBSCRIBE TO CIO
Are you involved in setting the direction for your company's IT budget or strategy?
Apply today for a FREE subscription to CIO Magazine!
Fri, May 9, 2008 15:52 EDT
IT Security Organizational Structure
|
Posted by: Anonymous in Best Practices Topic: IT Organization Management
Current Rating: |
When setting up a security organization within the Office of the CIO, is there an organizational structure that is most effective when integrating Policy Development and Assurance with the day to day Security Services delivery operation?
What are the strengths and weaknesses of separtaing Policy Development, Compliance, and Assurance staff from the operational Security staff?
All Comments
Comments
Fri, May 9, 2008 16:49 EDT
Personally I have seen everything: Integrated teams being resposnible for different groups or different teams being responsible for different themes. I do not think that there is a silver bullet for that. It is more about how and whether the teams talk to each other. It is important that we learn from incidents we have and that Operational Security can influnece the policy and vice verca
Just my 2cents
Roger Halbheer
Chief Security Advisor EMEA
Microsoft Corporation
You do not have flash or javascript support.
Fri, May 9, 2008 18:44 EDT
I think how any group is organized depends heavily on the culture and make up of that group. It is possible to have a highly centralized group that dictates policies if the culture is very top down. If you have a more organic model to your orgainization, you may have to push things into various areas with a more distributed model of organization. There is no ONE RIGHT model.
You do not have flash or javascript support.
Post new comment
Hot Conversations
Take My Windows 7 Please: A Resale Tale
Posted by Shane ONeill in News | 6 comments
Home Depot vs. Trevor Keezer and The God Squad
Posted by Meridith Levinson in News | 9 comments
Millennials + Enterprise Software: Doomed to Fail
Posted by Thomas Wailgum in News | 8 comments
Microsoft Bails on Family Guy, Remains Uncool
Posted by Shane ONeill in News | 6 comments
Creating a Privacy Policy Part V
Posted by Ariel Silverstone in Best Practices | 1 comments
Start a Conversation
Got something to say? We want to hear it! Click the Post button to get started. GO»
EXPERT ADVICE
There's a lot of buzz about Windows 7 out there. Each month in our webcast series, listen to analysts and customers discuss how Windows 7 and the Windows Optimized Desktop is impacting large companies around the world. Learn how they evaluated Windows 7, including the cost of deployment, deployment strategies, and tangible benefits.
Sponsored by Microsoft
Listen to on-demand Recordings »
Service Level Management Best Practices Life Cycle Overview - Improve Service Levels
Best practices for Service Level Management (SLM) is a process for consistently meeting customer requirements and delivering on IT's promises. See the steps required to ensure high-quality SLM.
Sponsored by Compuware
Read this White Paper »
Keeping Your Members Safe from Online Scams and Predators
In order to keep fraudsters out, romance sites must deploy effective solutions that look at information independent of what is supplied by users. A device fingerprinting solution such as iovation ReputationManager™ provides unique insight into the computers being used to create multiple accounts and exposes hidden device-account relationships that identity-based fraud solutions often miss.
Sponsored by iovation
Read this White Paper »
Resource Alerts
Get instant email notifications by topic when white papers, webcasts, and case studies are added to our library.
NEWSLETTER
Sign-up for the Blogs & Discussion Newsletter
FEATURED SPONSORS
SPONSORED LINKS
THE IDG NETWORK
© 1994 - 2009 CXO Media Inc.