ABSTRACT
Once you have completed the information gathering, you need to compile the results: the business’s risks, the site security assessment, the security organization assessment, and so on. The compilation work is very important, and it will take some time to complete. I usually find that as I conduct the reviews I can only make brief notes; however, each evening after I have finished working onsite, I sit down and expand my notes to make them as complete as possible. When you are expanding your notes each night, you should also identify any open items that need to be followed up on later. I typically do that work on my laptop and sectionalize the notes as much as possible; doing it that way helps me when I get to this part of the process. Utilizing good organization skills during the entire process will be very valuable to you to make this aspect as simple as you can.
