Multi-Tiered Security Approach Can Help Assess Vulnerabilities and Reduce Risk of Breach
Hikvision Insights Into Security Breach and Vulnerabilities
Security magazine recommends a multi-tiered approach to help CISOs assess security vulnerabilities and reduce risk of breach in this article: “A Framework for Measuring InfoSec as a Business Function.”
It’s historically been challenging to measure security investment costs against performance and a company’s larger risk management strategy, according to the article. It added that “... new tools can now assist CISOs in meeting expectations, allowing them to defend against a growing threat landscape while also minimizing costs and enabling them to show the direct correlation between a proffered expenditure and its associated reduction in a particular risk. With these tools, CISOs have firmly in their grasp a TCC (total cost of controls) model that makes it possible to measure information security as a business function, balancing risks against their mitigating costs, maximizing value and efficiency.”
The article recommended a multi-tiered approach to risk management that includes the following recommendations:
- Use data from external sources to asses an organizations’ risk.
- Supplement external data with an internal analysis of in-house security systems.
- Assess an organization’s security process and policies.
Click here to read more.
For additional information about trends and insights into security breach and vulnerabilities, check out these Hikvision blogs: