Information Security Cost Management

Written in an accessible, informal style, Information Security Cost Management demonstrates how to strategically maximize a limited security budget without compromising the quality of risk management initiatives. Organized into management components, each chapter highlights common pitfalls in security initiatives and recommends cost saving methods to achieve intended results. It presents processes that show how to identify the most critical components of a system's security, staff a security operation, prioritize spending, manage internal and external audits, assess costs for identity and access management, maximize the use of vendors, and evaluate the costs of outsourcing.