COUNCIL POST: ACHIEVING THE FIVE LEVELS OF INFORMATION SECURITY GOVERNANCE

Council Post: Achieving the Five Levels of Information Security Governance

Steve Durbin is Chief Executive of the Information Security Forum. The five levels of security maturity and the resulting impact on governanceSecurity maturity in organizations can be divided into five levels. Ad hoc governanceStartup and small business often exhibit a rudimentary form of governance Establishing basic structures and processesThis level represents a step away from the chaotic and reactionary form of governance Going beyond the basics This marks a subtle but important shift in the perspective of the information security department Expand and mature This level is all about the Extend the reach of governance in terms of relevance and value. Achieve embedded and influential governance. This stage demonstrates a high level of security governance maturity.

#news