Business Drivers for Information Security Policies
It is impossible to eliminate all business risks. In fact, you would not want to. Taking risks and making a return on those risks are essential to business. How you manage that risk is what makes businesses successful. A good policy can reduce the likelihood of risk occurring or reduce its impact. A business must find a way to balance a number of competing drivers.
Some of these drivers include:
• Cost—Keep costs low.
• Customer satisfaction—Keep customer satisfaction high.
• Compliance—Meet regulatory obligations.
• Measurement—Be self-aware and avoid surprises.
and two peer replies
