[CISSP-D] Governing for Enterprise Security

  fyi and files.

1. Security Matters - How Much Security Is Enough? 
  - by Julia Allen

CIOs, CSOs, and system administrators may dream about achieving a state of 
complete organizational security, but this is unrealistic and financially 
imprudent. However, it is feasible to achieve /adequate security /at an 
enterprise level in response to 
the question, "How much security is enough?"

Achieving adequate security means more than complying with regulations or 
implementing commonly accepted best practices. Formulating the concept of 
adequate security helps define the benefit and optimized outcome for security 
investment. This formulation must occur in the context of identifying and 
managing the security risks to an organization's mission and objectives.

MORE [+] 
www.sei.cmu.edu/news-at-sei/columns/security_matters/security-
matters.htm

2. For the complete report - "Governing for Enterprise Security", go to:

www.sei.cmu.edu/publications/documents/05.reports/05tn023.html.

3. Have a safe day.

Enjoy,

Dan

www.securitybenchmark.com
  http://finance.groups.yahoo.com/group/Dans_SECemails/
http://finance.groups.yahoo.com/group/Dans_CCCemails/

                
---------------------------------
Brings words and photos together (easily) with
 PhotoMail  - it's free and works with Yahoo! Mail.