A well-designed control only reduces risk once it is implemented, integrated with the environment and kept running. This topic covers how the information security program moves controls from design into production without disrupting the business, and how it keeps them effective as systems change around them. For a manager, the key idea is that implementation is as much about people and processes as about technology.
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.