Security Management — The Process

Abstract

This paper gives a view of the organisational infrastructure necessary for the successful implementation of information technology security. Guidance is given on the writing of security policies, the assessment of risks, the realistic appraisal of threats and the selection of countermeasures. All of the mechanisms available can then be put into their proper place within the organisation to achieve the desired security. Moreover, it will be possible to assess the cost-benefit of each element of the security programme in order to decide on the practical compromises to be made.

The author wishes to acknowledge the help and advice given by R.J.Shute in the preparation of this paper

© 1997 Charmbrights Ltd. All rights reserved.D.W.Roberts has asserted the right to be identified as the author of this work.