
Security and information security can not be considered to be a commodity or modular component that an organization obtains to provide greater reliability and risk management.
The Information security practice provides insight into the process of developing an awareness of risk, the assessment of the current controls, and the alignment of controls to meet the requirements of the organisation.
The practice also highlights applicable security standards, policies, awareness and risk inherent to the enterprise environment.
Go to the Information Security Forum ...