Security managers have a hard time getting visibility and credibility in the organization. They typically do not get any face time with management, and when they do, it doesn't seem to help them get their points across. Management, on the other hand, is growing skeptical because past security investments have not delivered the promised results. And when management asks for benchmarks or spending numbers to compare their current level of spending with others, the numbers either aren't available or the organization's spending is way off. To make sense of existing investments and justify future spending, CISOs need to market information security to management regularly, focus on people and process proportionately to technology, and look at their innovation capacity.
This is an excerpt
Buy Risk-Free
Price: US $2495
Our Service Guarantee: If you are not completely satisfied with this document, notify Forrester within 24 hours of purchase for a full refund.
Already a Forrester Client? Log in to read this document.