Security Strategy

STRATEGY Strategy: An Introduction Strategic Planning Essentials Strategic Planning Process Evaluation Security Leadership Challenges Getting Started Other Challenges for Security and Strategic Planning When Strategic Planning Should Be Conducted Metaphor Analysis and Strategic Planning Creating a Security Culture Security Continuum (Moving toward a Security Culture) Getting to the Big Picture Background (Why Should Security Bother with Strategic Planning?) Menu of Strategic Planning Methods and Models Which Strategic Planning Tools? What Are Security Plan Essentials? (Analysis, Planning, and Implementation) When Should Strategic Planning Be Done? Six Keys to Successful Strategic Planning Myths about Strategic Planning Barriers to Strategic Planning Overcoming Negative Perceptions of Security Developing Strategic Thinking Skills Testing the Consumer Defining the Consumer Buckets Quick Customer Assessment Designing Customer Feedback Surveys Deploying a Survey Measuring Customer Satisfaction Results Integration of Consumer Data Strategic Framework (Inputs to Strategic Planning) Environmental Scan Regulations and Legal Environment Industry Standards Marketplace--Customer Base Organizational Culture National and International Requirements (Political and Economic) Competitive Intelligence Business Intelligence Technical Environment and Culture Business Drivers Additional Environmental Scan Resources Scenario Planning Futurist Consultant Services Blue Ocean Strategy versus Red Ocean Strategy Future (the Need to Be Forward Looking) Developing a Strategic Planning Process Process and Procedures Get Ready to Plan for a Plan Planning, Preparation, and Facilitation Building a Foundation for Strategy (High, Wide, and Deep) In the Beginning Implementation (a Bias toward Action and Learning) Feedback, Tracking, and Control Completion Best Strategies (Strategies That Work) Gates, Geeks, and Guards (Security Convergence) Benefits of Security Convergence Convergence Challenges Success Factors TACTICS Tactics: An Introduction Tactical Framework Objectives Identification First Principles Layer upon Layer (Defense in Depth) Defense-in-Depth Objectives Identification Information Environments Threats Environmental Objectives Did You See That! (Observation) Observation Objectives Drivers and Benefits for Excellence in Observation Observation Challenges Success Factors and Lessons Learned Excellence in Observation Control Objectives Trust but Verify (Accountability) Unmatched Value of Accountability Comprehensive Accountability Challenges Best Uses for the Accountability Tactic Comprehensive Accountability Identity Objectives Comprehensive Accountability Audit Objectives SDL and Incident Response Application (SDL)2--Software as a Service Extensions (SaaS) Transition Objectives Rapid Response Keep Your Enemies Closer Hire a Hacker Objectives The Hire a Hacker Controversy Success Factors and Lessons Learned Control Objectives Hire a Hessian (Outsourcing) Security in the Outsourcing of IT Services Security in the Outsourcing of Security Services Outsourcing of Security Services Objectives Challenges to Outsourcing Security Services Success Factors and Lessons Learned Outsourcing Security Services Control Objectives Security Awareness Training Staff Development Training Security Awareness Training Awareness Training Drivers and Benefits Industry Training Trends and Best-Practices Examples Training Resources Awareness Training Challenges Success Factors and Lessons Learned How Do You Know if Your Training Is Successful? Appendix: Physical Security Checklists