Align Your Security Program With the Business
September 16, 2016/Frederick Scholl/CSO, Cyber Security, Governance, Information Security, NIST, PCI, security
Information security used to be part of IT. That has changed recently; security now needs to be independently aligned with the business operations, not just IT operations. The PCI SSC calls this “Business as Usual” (BAU). NIST CSF talks about aligning cybersecurity requirements with business activities. I call this process information security governance and maintain a CSO Online blog on this topic. For a recent post on an approach to alignment between security and the business, go here.
Posted in Enterprise Cyber Risk Management
Tags: CSO, Cyber Security, Governance, Information Security, NIST, PCI, security
Tags: CSO, Cyber Security, Governance, Information Security, NIST, PCI, security
Frederick Scholl
Frederick Scholl is an accomplished Global Senior Information Security Risk Manager. Dr. Scholl earned a BS and Ph.D. in Electrical Engineering from Cornell University. In 1991, Fred founded Monarch Information Networks, LLC to enable forward-thinking organizations to protect their information. Previously, he co-founded Codenoll Technology Corporation (NASDAQ: CODN). He chaired the IEEE committee that wrote the first standard for Ethernet communication over fiber optic links, now used world-wide.
Book an Appointment for Cybersecurity Issues
Request an appointment with Dr. Fred Scholl. We will discuss any cybersecurity issues you have.
