As threats to technology systems and data are on an exponential rise, the development of an information security program becomes critically important to combat and address technology risk. An effective Information Security and risk management goes well beyond the implementation of just security enforcement technologies and products. It is the intersection of People, Process and Technology that creates a risk management lifecycle capable of being repeatable and sustainable within an organization. Using a continuous risk management approach it helps an organization address the ever-changing threat and vulnerability landscape to systems and data.
Program Objectives:
Attendees will learn about developing an Information Security Program using a continuous risk management lifecycle approach. We will identify the components of a security program, review the continuous risk management methods and demonstrate how these concepts can be designed to fit into any organization regardless of size or industry. We will review a sample of leading information security frameworks, standards and control structures that can be used as a foundation to building an effective continuous risk management program. Discussions on how and where to get started on building a continuous risk management program will be presented with recommendations on how to get started in your organization.
