Question

What impact does maturity have on an organization's security policy framework and information security governance?

Answer 1

Impact on an organization's security policy framework :

There are many challenges involved in managing the security policy. It requires optimizing policies, understanding application connectivity requirements, ensuring more granular control and orchestrating policies through a streamlined process that enables stakeholders to quickly respond to changing business needs. Each organization’s security policy management maturity level depends on the level of analysis, automation and process that can involve security administrators, network operations, compliance officers, application owners and senior management.

There are four levels :

Level 1: Initial - Manual

Level 2: Emerging – Automated Analysis

Level 3: Advanced – Automated Process

Level 4: Visionary

Impact on information security governance:

Information security governance is the responsibility of the board of directors and senior executives. It must be an integral and transparent part of enterprise governance and be aligned with the IT governance framework. Whilst senior executives have the responsibility to consider and respond to the concerns and sensitivities raised by information security, boards of directors will increasingly be expected to make information security an intrinsic part of governance, integrated with processes they already have in place to govern other critical organisational resources.

There are many aspects to information security governance, these are

• Desired outcomes of information security governance

• Knowledge and protection of information assets

• Benefits of information security governance

• Process integration