The following are the elements for a successful information security program:
- Policy: The rules for how your information security program behaves in addition to organizational policy
- Information security services: Technical and operational capabilities provided to the organization as a service:
- Vulnerability management service (vulnerability scanners)
- Malware detection services (antivirus/anti-malware)
- Log monitoring services (SIEM/log aggregation)
- Threat detection services (host and network IDs)
- Security architecture: Working with the business and IT teams to ensure that new IT systems are properly architected to properly protect the information that they contain commensurate with the information's value
- Information security guidance: Working with the business and IT teams helping them to properly understand and...
