Security requires work and constant attention. It's sad to say but many times people are more reactive than proactive. As such, we tend to respond to security incidents more easily than performing the planning and implementing up front. I usually tell people that security is a process. If you wanted to break it down it is at least six steps that flows as follows:- Inventory of assets
- Risk assessment
- Policy
- Implementation
- Training
- Audit
Try working with management to help them understand the value of security and the potential costs if proper security controls are not implemented.
Here are a couple of incidents to help highlight the importance:
|
