ABSTRACT
Management In a given environment, people perform processes using technology to produce results. The results contribute to the fulfillment of objectives, goals, and missions to achieve the overall enterprise vision. There are risks to the people, processes, technology, and environment that interfere with the effective and efficient production of results. Your job as a security professional is to identify those risks and address them in an appropriate manner. One element of risk is compliance – compliance with external legislative and regulatory mandates, as well as enterprise internal compliance with policies, standards, and procedures including those for security.
