Information Security Program Resources
The success of an information security program mainly depends on the available resources for information security management. Resources can be in the form of technologies as well as qualified employees. Apart from processes, policies, and people, an information security program involves a number of technologies.
An information security manager must be capable of making technical decisions to ensure that the deployed technologies are aligned with the information security program's goals and objectives. The following are some of the technological aspects that an information security manager needs to deal with:
- Placement of firewalls
- Antivirus/antimalware systems
- Security information and event management (SIEM) software
- Tools for AppSec and DevOps
