That was one finding from “Security Convergence: The State of the Enterprise,” a study authorized by ASIS International, Information Systems Audit and Control Association, and Information Systems Security Association (ISSA).
The study, conducted by Booz Allen Hamilton, surveyed chief security officers, chief information security officers and other security professionals representing 14 companies with revenues from US $1 billion to more than US $100 billion.
The results of the study reveal that security convergence impacts the business as a whole. The current state of security is a disconnected focus on individual functions and business elements, and the trend is toward a focus on the entire business. Imperatives driving this conversion are:
• The ever-expanding enterprise
• Value migration from physical- to information-based assets
• New protective technologies impact several functional areas
• New compliance and regulatory regimes
• Continuing pressure to reduce costs
The report also finds that, by necessity, security functions within organizations will need to focus on cross-functional, business-driven initiatives. There will be an increasing emphasis on enterprise risk at the business level, and security councils will be formed as security becomes an effective value-added function.
A Webcast discussing the report is available.
