March 10, 2010 |
| 08:30-09:00 |
Breakfast Reception
|
| 09:00-09:15 |
Welcome And Introductions
|
| 09:15-10:15 |
Marketing The Value Of Security
- Best practices and case studies for marketing information security
- Marketing to the executive management
- Marketing to middle managers
- Marketing to users
- Security reporting tips and techniques
|
| 10:15-11:15 |
Group Exercise: Security Services Portfolio
- Attendees’ security organization and services
- Assessing business value of current services
- Identifying service gaps
|
| 11:15-11:30 |
Break
|
| 11:30-12:15 |
Improving Security Performance
- Current trends and challenges in security organizational structure
- Aligning security responsibilities for success
- Structuring the security organization and appropriate roles/responsibilities
- Embedding security in the decision-making process
|
| 12:15-13:15 |
Lunch
|
| 13:15-14:45 |
Turning Operational Metrics Into Business Metrics
- Using metrics as a marketing tool
- Justifying expenditures though metrics
- Case study 1: automating value metrics
- Case study 2: process-centric metrics program
- Case study 3: delivering value through dashboards and reporting
|
| 14:45-15:00 |
Break
|
| 15:00-16:00 |
Group Exercise: Metrics Definitions
- Objectives of your metrics program: purpose, audience, and reporting intervals
- Understanding your current metrics capabilities: staff, data sources, and tools
- Brainstorm: identifying target metrics
- Action planning: gaps, quick hits, and strategic initiatives
|
| 16:00-17:00 |
Group Exercise: Security Scorecards
- Understanding the audience
- Brainstorm: developing the Balanced Security Scorecard
- Action planning: gaps, quick hits, and strategic initiatives
|
| 17:00-17:30 |
Wrap-Up And Q&A
|
| |
Measuring The Effectiveness Of Your Security Organization
Andrew Jaquith, Forrester, Speaker
Khalid Kark, Forrester, Speaker
|
