How to Implement an Information Security Program

by Charles Hornat Oct. 1, 2017 via Infosecwriters

This write-up is about my approach to Information Security and based on my own experiences. There are a number of ways to implement a program, but I believe that one has to first identify what they are protecting, understand the risks and associated threats, and then formulate a plan of protection.

http://www.infosecwriters.com/Papers/chornat_Intro_ISP.pdf