Information Security
19 April 2011
The number of significant security breaches hitting the headlines almost daily, remind us how corporate information security management strategies, if they exist at all, often do not provide the expected benefits. Lack of follow-throug by top management; ineffective organisation; failure to identify prevalent risks; diverging views between the various stakeholders; hazardous investments; lack of specific resources or competencies; unsafe behaviour by users: the list of challenges seems endless.