Don't neglect developing your security organization's high-level goals, strategies, and objectives. A good strategy can mean the difference between Security being thought of as a necessary cost and Security being thought of as an enterprise-level risk partner.
The following goals, strategies, and objectives are based on examples we've witnessed as we help organizations move security to that next level.
