WHITE PAPER

Tripwire

Business Aligned Security

Source: Edgile

Information security is viewed by most organizations as a risk mitigation activity. However, information security plays a very important role in enabling the business. This paper discusses a new approach to security governance that moves an organization's information security group from a risk-centric function to a business-centric capability, and how this new approach can transform how security is viewed and funded within the enterprise.