To answer you directly, no I don't have ROI data. It seems to me that would
be an extreme reach to claim ROI on the functions you mentioned.
I'm responding to your post because I was able to create two IT Security
Architects positions using the issue of regulatory compliance as a driver.
I started with a realistic Information Security Program gap analysis and
simply outlined our deficiencies to management.
"you want these problems fixed, i'll need these types of positions to get it
done"...and it worked.
To help you more fully requires an understanding of many things....your own
title, your company business, size of current staff...even reporting
structure is important. (a concern for our company was the difference
between enterprise architects and security architects)
good luck!
----- Original Message -----
From: <grmerrill (at) epbfi (dot) com [email concealed]>
To: <security-basics (at) securityfocus (dot) com [email concealed]>
Sent: Sunday, May 27, 2012 11:30 AM
Subject: ROI data
> Does anyone have current ROI data on implementing an IA architect
> position?
>
> This is like an IT security Architect only focusing more on Security plan,
> Business Continuity, Disaster Managaement, and Data Integrity.
>
> This would be an enterprise manager overseeing several systems admins
> responsible in part for their own systems andintegrating all systems into
> the master plan.
>
> This should also reflect the benefits of getting all of the above in line
> as a benefit for meeting many compliance deadlines and integration dates.
>
> Thank You,
> Gordon R Merrill MSIA
> Information Assurance Professional
> GRMerrill (at) epbfi (dot) net [email concealed]
>
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL
> certificate. We look at how SSL works, how it benefits your company and
> how your customers can tell if a site is secure. You will find out how to
> test, purchase, install and use a thawte Digital Certificate on your
> Apache web server. Throughout, best practices for set-up are highlighted
> to help you ensure efficient ongoing management of your encryption keys
> and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
> ------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
To answer you directly, no I don't have ROI data. It seems to me that would
be an extreme reach to claim ROI on the functions you mentioned.
I'm responding to your post because I was able to create two IT Security
Architects positions using the issue of regulatory compliance as a driver.
I started with a realistic Information Security Program gap analysis and
simply outlined our deficiencies to management.
"you want these problems fixed, i'll need these types of positions to get it
done"...and it worked.
To help you more fully requires an understanding of many things....your own
title, your company business, size of current staff...even reporting
structure is important. (a concern for our company was the difference
between enterprise architects and security architects)
good luck!
----- Original Message -----
From: <grmerrill (at) epbfi (dot) com [email concealed]>
To: <security-basics (at) securityfocus (dot) com [email concealed]>
Sent: Sunday, May 27, 2012 11:30 AM
Subject: ROI data
> Does anyone have current ROI data on implementing an IA architect
> position?
>
> This is like an IT security Architect only focusing more on Security plan,
> Business Continuity, Disaster Managaement, and Data Integrity.
>
> This would be an enterprise manager overseeing several systems admins
> responsible in part for their own systems andintegrating all systems into
> the master plan.
>
> This should also reflect the benefits of getting all of the above in line
> as a benefit for meeting many compliance deadlines and integration dates.
>
> Thank You,
> Gordon R Merrill MSIA
> Information Assurance Professional
> GRMerrill (at) epbfi (dot) net [email concealed]
>
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL
> certificate. We look at how SSL works, how it benefits your company and
> how your customers can tell if a site is secure. You will find out how to
> test, purchase, install and use a thawte Digital Certificate on your
> Apache web server. Throughout, best practices for set-up are highlighted
> to help you ensure efficient ongoing management of your encryption keys
> and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
> ------------------------------------------------------------------------
>
>
------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
------------------------------------------------------------------------
[ reply ]