Security Effectiveness Framework Study

More documents

Recommendations

Info

Security Effectiveness Framework study Part 5: Please state whether each governance feature is implemented fully, partially or not at all in your organisation today. Fully deployed Partially deployed Not deployed 1 Appointment of a high-level CISO. 2.50 0.00 -2.50 2 Board or audit committee oversight. 2.50 0.00 -2.50 3 Direct budgetary authority. 2.50 0.00 -2.50 4 Convergence between physical & logical security. 2.50 0.00 -2.50 5 Cross-functional steering committee. 2.50 0.00 -2.50 6 Metrics or measures used to define success. 2.50 0.00 -2.50 7 Security department or function is officially sanctioned (charter). 2.50 0.00 -2.50 8 Participation in benchmark program (with reference to peer group). 2.50 0.00 -2.50 9 Segregation of duties between CISO and IT operations. 2.50 0.00 -2.50 10 Upstream reporting channel to the CEO. 2.50 0.00 -2.50 Total score 25.00 0.00 -25.00 Part 6: Please state Yes or No to each one of the following questions concerning your organisation’s security budget today. Yes No 1 My organisation’s security budget is sufficient to accomplish its mission and objectives. 3.00 -3.00 2 My organisation’s security budget is sufficient to ensure our IT systems are not disrupted or brought down by attackers. 3.00 -3.00 3 My organisation’s security budget is sufficient to achieve certification from reputable authorities such as ISO, NIST, PCI or others. 3.00 -3.00 4 My organisation’s security budget is sufficient to curtail or minimize data breach incidents. 3.00 -3.00 5 My organisation’s security budget is sufficient to ensure policies are strictly enforced throughout the enterprise. 3.00 -3.00 Total score 15.00 -15.00 26 Sponsored by: HP Information Security and Check Point Software Technologies Ltd. Ponemon Institute © Research Report & Instrument
Security Effectiveness Framework study Part 7: Please complete the following questions about your background and other company-related information. Your current title is: D2. Is this a full time position? Yes No D1. What organisational level best describes your current position? Senior Executive Vice President Director Manager Supervisor Technician Staff Contractor Other D3. Check the Primary Person you or your IT security leader reports to within the organisation. CEO/Executive Committee Chief Financial Officer General Counsel Chief Information Officer Compliance Officer Human Resources VP Chief Security Officer Chief Risk Officer Other D4. Total years of relevant experience Total years of IT or security experience Total years in current position years D5. Gender: Female Male D6. What industry best describes your organisation’s industry focus? Airlines Automotive Brokerage & Investments Communications Chemicals Credit Cards Defense Education Energy Entertainment and Media Federal Government Food Service Healthcare Hospitality Manufacturing Insurance Internet & ISPs State or Local Government Pharmaceuticals Professional Services Research Retailing Retail Banking Services Technology & Software Transportation D7. Where are your employees located? (check all that apply): United Kingdom Europe North America Middle east Asia-Pacific Latin America D8. What is the worldwide headcount of your organisation? Less than 500 people 500 to 1,000 people 1,001 to 5,000 people 5,001 to 25,000 people 25,001 to 75,000 people More than 75,000 people Sponsored by: HP Information Security and Check Point Software Technologies Ltd. Ponemon Institute © Research Report & InstrumentPonemon Institute © Research Report & Instrument 27
Page 1 and 2: Security Effectiveness Framework St
Page 3 and 4: Security Effectiveness Framework st
Page 7 and 8: Part 1 Security Effectiveness Bench
Page 13: Security Effectiveness Framework st
Page 28: Section Contact title Information:

Security Effectiveness Framework Study

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?