Chapter 1 - Building a Secure Organization

Abstract

Building a secure organization is important to long-term success. When a business implements and maintains a strong security posture, it can take advantage of numerous benefits. An organization that can demonstrate an infrastructure protected by robust security mechanisms can potentially see a reduction in insurance premiums being paid. A secure organization can use its security program as a marketing tool, demonstrating to clients that it values their business so much that it takes a very aggressive stance on protecting their information. Security breaches can cost an organization significantly through a tarnished reputation, lost business, and legal fees. Numerous regulations, such as the Health Insurance Portability and Accountability Act, the Gramm-Leach-Bliley Act, and the Sarbanes-Oxley Act, require businesses to maintain the security of information. Security, by its very nature, is inconvenient, and the more robust the security mechanisms, the more inconvenient the process becomes. Most security mechanisms, from passwords to multifactor authentication, are seen as roadblocks to productivity. Despite the benefits of maintaining a secure organization and the potentially devastating consequences of not doing so, many organizations have poor security mechanisms, implementations, policies, and culture.