ISMS Business Case Builder – Context

Looking for a more strategic and pragmatic approach to information security, but unsure where the value is?

We have set out the main issues behind planning the business case for an information security management system (ISMS). This has been written with two audiences in mind:

• Those relatively new to information security with a basic understanding of the terminology and landscape already but unsure where the value is from an ISMS.
• Information security improvers and experts who are struggling to get traction with their efforts to secure funding for more strategic and serious solutions like an ISMS.

Information security is complicated as it touches every part of the organisation and means different things to different people.

However, it does not need to be as hard or as expensive as many suggest. The right people combined with the right technology makes it much more accessible and affordable to do well.