4. Start with your fears to protect what's essential
4.1 Focus on the company's internal control objectives
IT contributes to the company's businesses, and information security must meet the quality and safety requirements of these businesses. We need to establish a security indicator that is linked to the impact avoided (figure 4 ); then, security will be legible and managed as a performance factor. Indeed, if the company is unaware of any "business" impact induced by IT, it may believe that the result would be the same without security, and that it would be a good idea to invest less in things that, after all, are restrictive.
The Ultimate Scientific and Technical Reference
This article is included in
Control and systems engineering
This offer includes:
Knowledge Base
Updated and enriched with articles validated by our scientific committees
Services
A set of exclusive tools to complement the resources
Practical Path
Operational and didactic, to guarantee the acquisition of transversal skills
Doc & Quiz
Interactive articles with quizzes, for constructive reading
Start with your fears to protect what's essential
Integrating the threat as a system variable
Bibliography
Also in our database
Software tools
EBIOS – Risk analysis software
EBIOS 2010 – Expressing needs and identifying security objectives
CLUSIF...
Websites
CLUSIF – French Information Security Club
Computer security primer
http://abcdelasecurite.free.fr/
Useful links for computer security. CERT-RENATER archives, etc. CERT-A archives. False web...
Events
Assises de la Sécurité et des Systèmes d'Information > Home. October 5, 6, 7 and 8, 2011. A unity of players. All the decision-makers in the world of security.
Standards and norms
ISO 27001 Security
Informational site dedicated to the ISO/IEC 27000-series (ISO27k) standards for information security management systems.
Regulations
Legifrance – Public access to the law
Guide to Legistics. Evolution of the volume of texts. Codification. French law. Laws and regulations. Impact studies. Application of laws.
http://www.legifrance.gouv.fr/
Law no. 78-17 of January 6, 1978 – Text details
January 6, 1978,...
Statistical and economic data
Source 2011: IT Security Figures
http://www.co-c.net/chiffres-securite-france.php
A few statistics:
160 items of computer equipment disappear every day in France ;
more than 80% of e-mail traffic worldwide...
The Ultimate Scientific and Technical Reference
