Security Program Planning :: Risk Decisions

Like all planning, security program planning is a cyclical process, involving the following steps:

● Identify Security Program Problems
	●	Prioritize Assets
	●	Characterize Security Threats
	●	Characterize Protective Measures
	●	Identify Program Vulnerabilities and Risks
Develop Security Solutions
	●	Cost Effective
	●	Culture Appropriate
Implement Program Changes
	●	Systems
	●	Staff
	●	Policies/Procedures
	●	Training
Monitor Program Progress
	●	Review Metrics
	●	Test System
	●	Security Surveys and Audits