RSA Archer IT Security Risk Management Maturity Model White Paper

0 0 525

Organizations face a litany of threats in the modern digital business world. Managing IT security today requires a combination of technology controls, effective and efficient processes, and skilled, informed people. The RSA Archer Maturity Model for IT Security Risk Management (ITSRM) outlines RSA Archer’s role in the critical stages in a company's journey from reactive, compliance-driven processes to a risk-centric, opportunity-focused security program that is a competitive advantage to fuel the enterprise.

ABOUT THE RSA ARCHER MATURITY MODEL SERIES

RSA Archer's vision is to help organizations transform compliance, manage risk and exploit opportunity with Risk Intelligence made possible via an integrated, coordinated GRC program. The RSA Archer Maturity Model series of white papers outlines multiple segments of risk management that organizations must address to transform their GRC programs.

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Comment

About the Author

I manage the product marketing team for RSA Archer and am responsible for applying my experience in IT, Security and GRC management to solution design and strategy of RSA Archer’s GRC solutions. Prior to joining RSA, I was one of the founders and the Chief Compliance Strategist for Brabeion Software where I was responsible for overall product strategy, product management and content management. Before Brabeion Software, I was a Director in PricewaterhouseCoopers’ Advisory Practice focusing exclusively on information security consulting and auditing. During my tenure at PwC, I led a wide range of security and compliance engagements including security strategy, security policy development, audits, penetration studies, Sarbanes-Oxley preparation and computer crime investigation. In 1998, I became the lead developer of PwC’s Enterprise Security Architecture System (ESAS) and led product management until Brabeion acquired ESAS in 2005. I served as PricewaterhouseCoopers’ global Subject Matter Expert on Enterprise Security Architecture and Security Policy. I have published many articles on key topics in security, and was a primary developer of PricewaterhouseCoopers' methodologies on Enterprise Security Architecture and security policy development. Prior to PwC, I had operational roles in information systems at the Missouri State Highway Patrol and A.G. Edwards. I received a Bachelor’s of Science degree in Mathematical Sciences from Southern Illinois University-Edwardsville. Follow me on twitter @steveschlarman.

Archer® Blog

RSA Archer IT Security Risk Management Maturity Model White Paper

Archer^® Blog