ja_mageia

The information security community has acknowledged the importance of aligning business interests with technology and security objectives. The statement, “Security is no longer a technology problem but a business problem.”, is almost cliché. This understanding, however, has not led to the wide spread adoption of leading business practices in information security programs. Laconic Security works to aid our clients in the implementation of these business practices and so increase the efficiency and effectiveness of their security programs.

Business questions answered by our services:

• Risk Analysis; What do we do first?
• Security Financial Analysis; How much money will it take?
  
• Strategic Planning (PELM); How do we get this done?
• Metrics Program; Are we succeeding or failing? What can we do better?
• Maturity Services; Can we reduce our cost over time?
• Management Consulting; Who is going to do this? Why? How well?
• Business Process Analysis; Is there an easier way to do this?

Laconic Security has built a portfolio to address many of the business areas that need to be included to improve the overall information security program. These service offerings are categorized by discipline into; Risk Analysis, Financial & Budget Analysis, Strategic Planning, Metrics, Maturity Services and Management. A simple paradigm which relates these services is that of; Plan – Execute – Lead – Measure (PELM).

A highly effective information security program will have a well documented one, three, and five year plan; fully funded and well justified in economic risk-based terms. This plan will derive from a collaborative effort on the part of the delivery team members, including outside key players. There will be logical performance and financial metrics assigned; all transparently collected and reported.

The team will be effectively led and their value as knowledge workers will be recognized and leveraged by applying hybrid maturity programs that provide for repeatable process while still allowing individual initiative and creativity. All of this will be executed by well documented, yet flexible, business processes that account for internal security operations as well as shared business processes. Business processes are shared with both internal corporate teams (e.g. legal, human resources, marketing, etc…) and strategic vendors.

The team at Laconic Security has worked with much of the Fortune 500 and have thus seen many of the best and worst in security business practices. Let us help you demonstrate sustained and measurable improvements in the security of your bottom line.