Following the Wh1t3 Rabbit - Practical Enterprise Security

Enterprise Security organizations often find themselves caught between the ever-changing needs of the agile business, and the ever-present, ever-evolving threats to that business. At the same time – all too often we security professionals get caught up in “shiny object syndrome” which leads us to spend poorly, allocate resources unwisely, and generally de-couple from the organization we’re chartered to defend. Knowing how to defend begins with knowing what you’ll be defending, why it is worth defending, and who you’ll be defending from… and therein lies the trick. This blog takes the issue of enterprise security head-on, challenging outdated thinking and bringing a pragmatic, business-aligned, beyond the tools perspective … so follow the Wh1t3 Rabbit and remember that tools alone don’t solve problems, strategic thinkers are the key.

Rafal (Principal, Strategic Security Services)

The Capability Maturity Gap Between the Business and Information Security

Wh1t3Rabbit| January 30, 2013

1 Comments

In many organizations, it's painfully obvious that the maturity of the Information Security organization lags significantly behind the maturity of the business and its processes. Why? This relationship in maturity appears to be hinged on the relationship between the business and Information Security itself, and whether the two components of the enterprise are partners, or simply some level of adversary...

Read Blog Article

Labels: CMMI| Enterprise security

Labels: