Organizational structure
The development of a security strategy is highly influenced by the organizational structure. Organizational structure means the roles and responsibilities of different individuals, the reporting hierarchy, whether the organization functions in a centralized or decentralized way, and so on. A flexible and evolving organizational structure is more open to the adoption of a security strategy as opposed to a more constrained organizational structure.
The independence of the security function is the most important factor to be considered while evaluating organizational functions. This can be assessed through the reporting structure of the security function.
Board of directors
The ultimate responsibility for the appropriate protection of an organization's information falls to the board of directors. The involvement of board members in information security initiatives indicates good governance. The company directors can be protected from liability...
