TABLE OF CONTENTS Read not to contradict and confute, nor to believe and take for granted, nor to find talk and discourse, but to weigh and consider. Francis Bacon [1]
This chapter, "Annual Reevaluation and Future Plans," describes the process that can be used each year to determine the successes and failures of the InfoSec organization and CIAPP, and a methodology that can be used to correct the failures and plan for the upcoming years.
[1]Francis Bacon (1561 1626), English philosopher, lawyer, and statesman. Essays "Of Studies" (1625) Encarta Book of Quotations & (P) 1999, Microsoft Corporation. All rights reserved. Developed for Microsoft by Bloomsbury Publishing Plc.
The information environment of IWC is very dynamic and must be so in order for IWC to successfully compete in the fast-paced widget business in the global marketplace. Consequently, the world of the ISSO must also be very dynamic. The IWC ISSO must constantly be looking at where the IWC business is going and modify the CIAPP and InfoSec organization accordingly. The ISSO cannot sit back and think that the CIAPP is in place, the InfoSec organization is established, and everything is running smoothly even when you think it is.
As IWC's ISSO you must be working everyday to provide effective and efficient service and support to IWC in the future. You must project ahead and look at potential new threats to IWC's information and systems and begin now to mitigate those future threats, such as cellular phones with installed digital...
