Business Drivers for Information Security Policies

It is impossible to eliminate all business risks. In fact, you would not want to. Taking risks and making a return on those risks are essential to business. How you manage that risk is what makes businesses successful. A good policy can reduce the likelihood of risk occurring or reduce its impact. A business must find a way to balance a number of competing drivers.

• Why are business drivers important? Explain
• How do business drivers impact operations security?
• What is the difference between business risk exposure and business liability?
• Describe the relationship between business risks and security policies.