Conclusion
Information systems security - Guaranteeing the mastery of risk

Security must be a cross-cutting process for any system that presents risks and supports threats. All systemic methodologies apply as soon as we consider that threats, though exogenous and anachronistic, are part of the perimeter and need to be monitored and dealt with.

Security should not be perceived as a constraint, as it gives coherence to management and enables us to adopt a preventive and proactive attitude to risks and threats, and not just a reactive one.

Security is a method for containing threats in our environments. It can only be appreciated if the three functions (prevention, detection and reaction), embodied respectively by monitoring, controls and corrective actions, are present and correlated.

Security links the company's security strategy to its operational implementation. It must be dynamic, and...