Book DescriptionSecuring Business Information provides an approach to security that is derived from numerous successful implementations. The Enterprise Security Plan (ESP) is a six-step process for tailoring enterprise security techniques to the needs of your business.
This book will guide you through these steps to secure your computing infrastructure within the constraints of normal business operations, resources, and today"s technology:
- Prepare the enterprise, starting with the staff and their roles.
- Organize a group of security domains and assess the tolerable amount of risk for each.
- Complete a baseline security analysis and derive a set of guiding policies.
- Determine how security policies are being enforced throughout the enterprise.
- Identify gaps and set priorities.
- Plan the projects to implement an appropriately secure enterprise.