The Business Case for Security
.....How to Plan it, Deliver it, Measure it and Communicate it

As a security executive you understand the threats and risks your organization faces every day. They come in a variety of shapes and sizes. There are new ones that pop-up every now and then but, at the end of the day, everything is a variation of something that has been seen in the past. You also understand that if your organization doesn't address these issues head on there will be consequences. But measuring the impact of those consequences has always been your job. You identify the threats, determine the impact, weigh the risk...and then decide on a course of action for your business to take.

Now comes the hard part.........