Build an Information Security Strategy for Small Enterprises – Phases 1-4

Author(s): Kate Wood , Michel Hebert , P.J. Ryan

Small enterprises face the same threats as any other sized organization. They need a security strategy just as bigger organizations do. That security strategy should not follow frameworks blindly. Instead, it should align with your business context and build on a solid risk assessment and a comprehensive gap analysis. Use this storyboard to build or update a business-aligned, risk-aware, and holistic security strategy that prioritizes program initiatives for the next three years.

Tags

small enterprise, security management and governance,  NIST,  ISO 27001,  ISO 27002,  COBIT,  NIST CIS,  SANS, security guidance,  security roadmap,  security plan,  risk tolerance,  security pressure analysis,  compliance,  security threat assessment,  security audit,  gap analysis, security framework,  security governance,  security risk assessment, security pressure analysis, security program charter

View the Complete Blueprint:

Thought model representing Build an Information Security Strategy for Small Enterprises

Build an Information Security Strategy for Small Enterprises

Small enterprises need a security strategy just like any other sized enterprise.

Related Content: Small Enterprise Resources

Thought model representing Information Security Program Gap Analysis Tool

Information Security Program Gap Analysis Tool
Thought model representing Information Security Strategy Communication Deck

Information Security Strategy Communication Deck
Thought model representing Information Security Requirements Gathering Tool

Information Security Requirements Gathering Tool
Thought model representing Information Security Pressure Analysis Tool

Information Security Pressure Analysis Tool
Thought model representing Build an Information Security Strategy for Small Enterprises

Build an Information Security Strategy for Small Enterprises
© Info-Tech Research Group | Terms of Use | Privacy Policy