TABLE OF CONTENTS Understand the need for senior management support
Identify the characteristics of effective IA management
Determine approaches to IA management
Discuss challenges of managing IA resources
Identify metrics for selling security to management
There are two basic differences between your organization and its competitors: the value of products to customers, and their cost. If you can show you add value to the organization's products, then you will be making a contribution. If not, try to minimize security costs and at least break even on your investment (Kovacich, 1993, p. 25).
Security is not an end in itself, but it does provide a critical service and support function for the organization. As such, security is an integral element of sound business management that requires management support at the highest level. Yet despite a growing awareness of the need for IA among senior managers, many security offices still experience thin staffs, little or no budget, and insufficient tools. Senior managers need to understand that IA "magic" comes with a price tag, but, if handled properly, there is a return on investment (ROI). This chapter will discuss the personnel, resources, and responsibilities needed to perform effective IA management.
Throughout the remainder of this book we will use the term "IA manager" as a generic term to describe the role and responsibilities of the person charged with the overall management of IA within the organization. In some...
