Challenges for InfoSec & Compliance

February 5, 2019
Network-Locks-1

One of today’s bigger challenges for CISOs, CTOs and CIOs is understanding all aspects of their information security (InfoSec) posture based on compliance and business requirements. Here is an example of a common problem I have seen many times.

In order to design or enhance a company’s information security, the InfoSec department must first assess and understand the current security infrastructure. In order to do this, the InfoSec team begins by collecting all the diagrams and technical documents from all the departments. Once all these documents are collected, InfoSec must validate and map the listed and depicted security controls against compliance and business requirements.

This challenge continues with an interview with the head of each department to understand their known, implemented security controls. But the challenge grows because each department only has expertise in their own domain and not in security frameworks or compliance expectations. With this gap of understanding, InfoSec must painstakingly investigate to find any missing security controls. Finally, InfoSec gets to design the necessary controls and make sure they are implemented and maintained correctly.

The best way to eliminate these gaps and achieve reliable posture and compliance understanding is to perform a detailed assessment of each of the security and compliance policies across all departments. From here, you will have a complete, accurate and well documented understanding of your information security posture and what is needed to achieve compliance. With an automated system you will be able to track the progress of each step of the process and each project needed to get there.

I hope this helps you understand some of the challenges and options available to improve the visibility and understanding of your InfoSec posture. Stay tuned for more coming soon.

176 Comments

  1. sign up binance

    Can you be more specific about the content of your article? After reading it, I still have some doubts. Hope you can help me.

    February 4, 2025 at 11:56 am
    Reply

  2. ZAP

    Zaproxy dolore alias impedit expedita quisquam.

    March 21, 2025 at 10:32 am
    Reply

  54. buy-bm.org_Skify

    buy fb business manager buy-bm.org

    May 20, 2025 at 11:09 pm
    Reply

  58. tiktok-agency-account-for-sale.org_Skify

    buy tiktok ads buy tiktok ads

    May 21, 2025 at 11:53 pm
    Reply

  63. 1win_uz_woEn

    1вин официальный сайт регистрация http://1win14005.ru .

    May 26, 2025 at 1:48 pm
    Reply

  74. 1win_lePn

    1win бонус за установку приложения http://1win22083.ru/ .

    May 28, 2025 at 7:12 am
    Reply

  94. 1win_hyOn

    1win скачать на андроид 1win22087.ru .

    June 1, 2025 at 10:07 am
    Reply

  108. kypit 1s v moskve_lpSl

    1с базовая купить .

    June 4, 2025 at 11:15 am
    Reply

  116. avtovoz_thkn

    услуги транспортировки автомобилей avtovoz-av1.ru .

    June 6, 2025 at 3:21 pm
    Reply

  117. avtovoz_fxMt

    услуги транспортировки автомобилей http://avtovoz-av2.ru/ .

    June 7, 2025 at 12:27 am
    Reply

  118. avtovoz_dnMt

    перевозка легковых автомобилей автовозом https://avtovoz-av2.ru/ .

    June 7, 2025 at 5:10 am
    Reply

  123. klybnaya myzika_koMr

    dj music dj music .

    June 8, 2025 at 12:56 pm
    Reply

  171. dostavka edi_rlMn

    здоровая ферма челябинск dostavka-edy-bf.ru .

    June 16, 2025 at 8:15 pm
    Reply

  174. dostavka edi_ftml

    здоровая ферма челябинск dostavka-edy-bf2.ru .

    June 16, 2025 at 11:42 pm
    Reply

Leave a Reply