How to Cheat at Managing Information Security

Policy, Strategy, and Standards: Business Theory

We are all aware that there are different levels of management (don t say asleep or awake) and that these operate on different time scales. Figure 2.1 shows a classic representation of these management levels as a hierarchical structure.


Figure 2.1: The Three Levels of Management

Each level is described in the following sections.

Strategy

Most people have heard the term strategy. In business, a strategy is a high-level future objective simple vision of what we, the firm, will be doing in the future. How far into the future? That depends on the volatility of the business environment. Typically a business will set a strategy to be enacted over a five- to seven-year period. You ve heard of a seven-year plan, right? This period isn t set in stone, but three to seven years is representative of most businesses.

An example strategy, sometimes known as a mission statement, for a hypothetical software business might be To become a top-five in-category accounting package provider for the Windows/Intel platform targeting FTSE 1000 customers (but excluding FTSE 250) based in the United Kingdom and Europe.

As mission statements go, this one is fairly elegant. It describes the customer, the suppliers, and the market segments. But you could not drive through any large-scale project (let alone the future of a large corporation) with this bare-bones information. You need a plan the strategic plan .

The strategic-planning process expands and illustrates all key areas that...

UNLIMITED FREE
ACCESS
TO THE WORLD'S BEST IDEAS

SUBMIT
Already a GlobalSpec user? Log in.

This is embarrasing...

An error occurred while processing the form. Please try again in a few minutes.

Customize Your GlobalSpec Experience

Category: Business Consulting Services
Finish!
Privacy Policy

This is embarrasing...

An error occurred while processing the form. Please try again in a few minutes.