Information Security Cost Management

Written in an accessible, informal style, Information Security Cost Management demonstrates how to strategically maximize a limited security budget without compromising the quality of risk management initiatives. Organized into management components, each chapter highlights common pitfalls in security initiatives and recommends cost saving methods to achieve intended results. It presents processes that show how to identify the most critical components of a system's security, staff a security organization, prioritize spending, manage internal and external audits, assess costs for identity and access management, maximize the use of vendors, and evaluate the costs of outsourcing.

While information security is an ever-present challenge for all types of organizations today, most focus on providing security without addressing the necessities of staff, time, or budget in a practical manner.Information Security Cost Management offers a pragmatic approach to implementing information security, taking budgetary and real-world constraints into consideration. By providing frameworks, step-by-step processes, and project management breakdowns, this book demonstrates how to design the best security strategy with the resources you have available. Organized into five sections, the book-Focuses on setting the right road map so that you can be most effective in your information security implementationsDiscusses cost-effective staffing, the single biggest expense to the security organizationPresents practical ways to build and manage the documentation that details strategy, provides resources for operating annual audits, and illustrates how to advertise accomplishments to senior management effectivelyIdentifies high-risk areas, focusing limited resources on the most imminent and severe threatsDescribes how to manage the key access controls when faced with manual user management, how to automate user management tasks in a cost effective manner, and how to deal with security breaches Demonstrating strategies to maximize a limited security budget without compromising the quality of risk management initiatives, Information Security Cost Management helps you save your organization time and money. It provides the tools required to implement policies, processes, and training that are crucial to the success of a company's security.

Security Strategy-Thinking Practically. Security Organization Design-Cost-Effective Staffing. Security Management- Effectively Enforcing Your Strategy. Security Technologies-Establishing a Solid Foundation. Security Operations-Maintaining Security Efficiently

Bazavan, Ioana V.; Lim, Ian