Choosing the Right Security Framework

This IDC Perspective discusses choosing the right security framework. Choosing the right security framework is not a trivial matter and should consider the various criteria described along with a good understanding of the various security frameworks available. Providing careful guidance throughout the process will make all the difference when engaging the key stakeholders and decision makers to make a sound choice. The result will benefit the organization with a security strategy that is the "right fit," is financially possible to achieve, and will have the best chance of being well managed."The right security framework is a critical factor in adequately managing security risks not only present today but also for risks that could appear in the future," says Phil Harris, research director, Cybersecurity Risk Management Services, IDC. "While there are several good security frameworks that have been created over the past few years, the good news is there is more to choose from, and the unwelcome news is it may not be an easy choice. The wrong choice could render a regulated organization insufficiently protected or leave a small to medium-sized business spending too much for security."