RISK MANAGEMENT STRATEGIES
Six key practices for a successful interdepartmental security committee
Al Berg, CISSP
05.25.2004
Rating: -4.09- (out of 5)
|
I know, I know – the thought of forming yet another committee and setting up yet another meeting on your crowded calendar is enough to make you roll your eyes. However, when properly organized and run, an interdepartmental security committee (ISC) can provide the infosec professional with valuable information, assistance when a crisis hits, and maybe most importantly, a closer relationship with business units. In many cases, the impetus for starting an ISC is the writing of policies to govern information security in an organization.
Here are some best practices to help you form and make the most of an interdepartmental security committee (ISC) in your organization:
Properly focused on the security needs of the business, an interdepartmental securi
To continue reading for free, register below or login
To read more you must become a member of SearchSecurity.com
ty committee can extend the reach of your corporate infosec department into the business units and build an organization-wide awareness of security as a business enabler rather than as a barrier to growth.
About the author
Al Berg, CISSP, is a technical director in the Corporate Information Security Department of a firm providing computer services to the financial services industry. Al has been in the information security industry for more than 10 years and has provided consulting services to major corporations and the U.S. Defense Department. Al has spoken at numerous industry conferences in the U.S. and Europe, and has published many articles on networking and security topics, including some in our sister publication Information Security magazine.
|
|
Rate this Tip
|
To rate tips, you must be a member of SearchSecurity.com.
Register now
to start rating these tips. Log in if you are already a member.
|
DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.
|
|
|
|
|
|
|
