Reference no: EM133699550

Question: Here, you have stressed several critical cornerstones for any effective information assurance program - comprehensive risk management, stringent security controls, regular training and awareness, and a proactive incident response program. These are all essential elements of any effort to effectively protect an organization's assets. Executive endorsement can be a real challenge. Here, you have suggested an excellent approach - building a solid business case to demonstrate how a well-designed and functioning information assurance program can result in significant cost savings and other operational benefits to the organization. This approach emphasizes the 'bottom line' and can be a vital tool that the CISO can use to convince resistant executives of the merits of a robust information assurance program. Another helpful approach is to work with other departments, such as the IT department (which is frequently responsible for implementing most security controls), to ensure that the 'right' security controls are implemented in the 'right' way. This way, security controls are baked right into the organization's existing systems, and there is a greater likelihood that the organization will be security-minded and take an active and helpful approach toward its information assurance program. Demonstrating how information assurance supports and assists the organization in improving