Positioning the roles, interfaces & processes in the InfoSec scene Dimitrios Papadopoulos and Bernhard Hammerli

All information security professionals around the globe acknowledge that "everyone is responsible for information security" in a company. This trivial statement looks clever but hides core challenges, "Who is everyone? How does everyone contribute or challenge information security?” In our researched project we researched in-depth roles, processes and interaction in the corporate information security, by creating a framework for crystal clear defined roles and its associated security obligations and responsibilities. 20 corporate roles are analyzed from management and security perspective; classical interactions between information security roles leveraging and turning down security are given in case studies. Furthermore we generated structured tasks descriptions of the roles and open the road to the fulfillment of an information security consultants dream by creating Job descriptions including its security responsibilities! We justified the necessity of defining roles and by... Это и многое другое вы найдете в книге Positioning the roles, interfaces & processes in the InfoSec scene (Dimitrios Papadopoulos and Bernhard Hammerli)