Home > Information Security Magazine > Features > Security 7 Award winners tackle important information security issues
EMAIL THIS
Information Security Magazine

  CURRENT ISSUE  

  FEATURES  

  COLUMNS  

  HOT PICK & PRODUCT REVIEWS  

  ARCHIVES  

  SUBSCRIBE/RENEW  
 

Security 7 Award winners tackle important information security issues
Issue: Oct 2008
printer-friendly
< PREV PAGE   |   1  |   2  |   3  |   4  |   5  |   6  |   7  |   8  |   9  |   10  |   11  |   12  |   13  |   14  |   15  |   16  |   NEXT PAGE  >

strategic planning
Prerequisite Strategy by Mark Weatherford

Ignore strategic planning at your own peril.

Mark Weatherford

  • TITLE Executive officer
  • COMPANY California Office of Information Security and Privacy Protection
  • INDUSTRY Government
  • KUDOS
    • Appointed in April to this new office by Gov. Arnold Schwarzenegger.
    • Former Naval cryptology officer.
    • Six years as Colorado CISO.
    • Proactive about data protection and governance.
    • Developed a Data Governance Working Group that defined the data security lifecycle for state agencies.
    • Initiated a threat and vulnerability management program (TVMP) that reviews and tests Web applications for security issues.

  • Other initiatives:
    • Enterprise, statewide security policies
    • Critical system inventory program
    • Laptop encryption deployment
    • Incident response program
    • Outreach and training programs


...


[IMAGE]
I've spent considerable time recently pondering that mystical subject called strategic thinking. I'm not sure why it's considered mystical, but as I talk to colleagues in the public and private sectors, people roll their eyes and take on an aura of resignation when they talk about developing a Strategic Plan.

After some interesting discussions over the years, I've concluded that much of our strategic thinking efforts and subsequent strategic planning amounts to little more than brainstorming drills that happen to occur around a certain time each year. The result is typically more of a tactical plan than a real strategic vision for our security organization. Why?

Here's an interesting thought--we're in a tough business where decisions can (and do) cost a CISO his or her job, so when it comes to dividing resources between the strategic-of-the-future and the tactical-of-the-now, perhaps it's simply a personal economic decision to keep a roof over one's head and bread on the table. Maslow said it first! Can you relate?


< PREV PAGE   |   1  |   2  |   3  |   4  |   5  |   6  |   7  |   8  |   9  |   10  |   11  |   12  |   13  |   14  |   15  |   16  |   NEXT PAGE  >





TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts