Security assurance needs a business-focused approach

Business leaders want to be confident that their operations will continue running as normal without information being compromised. But in today’s fast-moving, interconnected world where the threat landscape is constantly evolving, security assurance programs often provide a false level of confidence. The Information Security Forum (ISF) is releasing a new report, Establishing a Business-Focused Security Assurance Program which explores how individuals responsible for providing security assurance in their organization can meet the specific needs of business stakeholders. "Taking a business-focused approach to security assurance is an evolution. It means going a step further and demonstrating how well business processes, projects… [Continue Reading]