CSR Event

Auditing Information Security

Auditing Information Security - Evaluating the Effectiveness of Your Information Security Program

by Dan Swanson and Clint Kreitner

Description:

This 2-hour event will show you how to audit your information security program. The information security program is a critical component of every organization's risk management effort, providing the means to protect the organization's information and other critical assets. A well-managed business unit (and/or program) has robust plans, procedures, goals, objectives, trained staff, performance reporting, and ongoing improvement efforts.

The audit team will look for evidence that the information security program is well organized and well managed. The security program must also specifically mitigate risks in satisfying key business objectives, and this traceability must be clear.

Your information security audit should confirm that key risks to the organization are being identified, monitored, and controlled; that key controls are operating effectively and consistently; and that management and staff have the ability to recognize and respond to new threats and risks as they arise. Audits and reviews of your information security program and its management advance the goal of program oversight and ensuring continuous improvement and success.

Discussion topics will include:

Date: September 20, 2007

Time: 10:00 am PST / 1:00 pm EDT - 12:00 pm PST / 3:00 pm EDT

Price: Free for Ethisphere Council members ($299 for non-members)
All participants will receive an hour-long one-on-one consultation with Dan Swanson and an Ethisphere associate.

To Register: Click here to register for this event.