This white paper outlines considerations and recommendations for reducing business risk through the use of an effective enterprise information security program.

Its goal is to present information that will be helpful not only to IT and information security professionals but business unit general managers as well.

Throughout, we take the perspective of presenting and considering choices based optimizing a security program for effectiveness, efficiency and business impact.