Topic Overview: IT Security

The practice of IT security is undergoing a significant transformation as demands and priorities change. Certainly, IT security still addresses IT threats, yet we now face more sophisticated threats perpetrated for profit rather than notoriety. And in addition, the weight of regulatory compliance and the building of a sustainable IT controls framework also falls heavily on the IT security professional's shoulders. Amidst all this, the very nature of business itself is changing and becoming increasingly externalized, with systems access and the transfer of information no longer confined within well-defined corporate networks. With the direct risks to business and brand posed by all these challenges, IT security is no longer just about IT, nor is it just about security; it's about information risk management. A successful IT security program both educates and works with executives and business managers both to prioritize and respond to these risks and also to communicate the value it delivers.