ABSTRACT
Information security program development is considered the process of implementing strategy into operational use. This will typically result in a series of projects or initiatives as the result of developing a strategy that meets the strategic objectives of the organization. It is the series of activities that over time results in achieving the “desired state” of the information security program, as discussed in Chapter 7.
