The unwillingness The principle of sole management should not be violat.
Of the department or the head of the organization to delve into information security issues.
Dumping them entirely on the information security service, does not lead to anything good.
Nowadays, most business owners have an idea about the ne to ensure information security, but the understanding.
That the information security service is ne in principle goes.
hand in hand with a complete misunderstanding of why it is ne.
As a result, artificial neoplasms without The unwillingness
Tasks understandable to business telegram data owners appear in the regular structure of the organization. If the IT manager of the organization is reasonable enough and is respect by the management, then IT services will not be transferr to the information security service. In this case, the employees of the information security department are engag in churning out instructions, regulations, regulations and other documents that are design, in the event of any audit, to show that work in the field of information security is being carri out at the enterprise.
For the same purpose, the information security service is task
With composing responses to requests on information security from regulators or especially active citizens. The worst thing is that almost all regulatory documents on ensuring information security in the organization are gathering dust on the shelves. Most employees not only do not comply with their provisions, but sometimes do not even suspect their existence. And the reason is that these instructions should be digital transformation: the challenges and opportunities of a changing business environment develop not by aero leads the IS service, but by the line business unit itself, under the sensitive guidance of its manager, who is responsible for the functioning of the relevant business process and the effective use of the assets entrust to him. The IS manager and the IS experts subordinate to him can help, prompt, explain, chew, but not make this document instead of the owner of the business process. Otherwise, the document will gather dust on the shelf.
