Apply today for a FREE subscription to CIO Magazine!
Fri, May 9, 2008 15:52 EDT
IT Security Organizational Structure
|
Posted by: Anonymous in Best Practices Topic: IT Organization Management
Current Rating: |
When setting up a security organization within the Office of the CIO, is there an organizational structure that is most effective when integrating Policy Development and Assurance with the day to day Security Services delivery operation?
What are the strengths and weaknesses of separtaing Policy Development, Compliance, and Assurance staff from the operational Security staff?
Personally I have seen everything: Integrated teams being resposnible for different groups or different teams being responsible for different themes. I do not think that there is a silver bullet for that. It is more about how and whether the teams talk to each other. It is important that we learn from incidents we have and that Operational Security can influnece the policy and vice verca
Just my 2cents
Roger Halbheer
Chief Security Advisor EMEA
Microsoft Corporation
I think how any group is organized depends heavily on the culture and make up of that group. It is possible to have a highly centralized group that dictates policies if the culture is very top down. If you have a more organic model to your orgainization, you may have to push things into various areas with a more distributed model of organization. There is no ONE RIGHT model.
How Long Have You Been Looking for a Job?
Posted by Meridith Levinson in Questions | 4 comments
5 Myths of Data Center Power Usage Optimization
Posted by Michael Bullock in Best Practices | 2 comments
Microsoft Has Itself a Windows 7 Netbook Pricing Dilemma
Posted by Shane ONeill in News | 1 comments
What a CIO Says, and What He's Really Thinking
Posted by Thomas Wailgum in Soapbox | 11 comments
Android May Lose Netbook Battle to Windows, but Win the War
Posted by Shane ONeill in News | 2 comments
Got something to say? We want to hear it! Click the Post button to get started. GO»
Agile Techniques, Agile Hype and the Essence of Agile [in IT and Business]
5 Myths of Data Center Power Usage Optimization
How Long Have You Been Looking for a Job?
Microsoft Has Itself a Windows 7 Netbook Pricing Dilemma
iPhone 3G S: If You Can't Beat Apple, Join 'Em
How Do You Manage Information Overload?
A good time to wear more hats
iPhone 3G S: Blockbuster Weekend
Persevering in the face of Fear, Uncertainty and Doubt
Take Your Time Moving To Process Based Organizations.
Preparing for the Next Cyber Attack
Ensure you are up-to-speed on the latest security technologies available to keep your network safe in this Executive Guide. Get a thorough assessment of the corporate security threat landscape. Protect your network with data leakage protection, NAC and other technologies explained in this report.
Sponsored by Qwest
Read this Executive Guide »
Cloud Building: 8 Ingredients for Internal Clouds
Cloud computing: a fundamentally new way to deploy IT services and functions cost-effectively and quickly. Learn how the VMware vCloud initiative dramatically improves how consumers access their information and experience applications as well as the 8 ingredients to get you going.
Sponsored by VMWare
Read this White Paper »
Investing in Business Analytics Technology
You're thinking now is the time to take the plunge into business analytics, but you still have some unanswered questions. This research summary addresses the most common questions and concerns surrounding the successful launch of a business analytics initiative. It also includes real-world examples of organizations already getting return on their investment.
Sponsored by SAS
Read this White Paper »
Get instant email notifications by topic when white papers, webcasts, and case studies are added to our library.
Sign-up for the Blogs & Discussion Newsletter
