INFOSEC Plans

• Divide by type of program.

  • Education, Training, Awareness

• Develop Strategic then Tactical then Program

  • Usually we go backwards

• Develop evaluation as part of plans

  • Be realistic not optimistic

• Management support

  • Not just lip service (See Proof - Manage up)

Previous slide

Next slide

Back to first slide

View graphic version