Toolkit

Story: Should IT security be separate from IT?

• 
• 

It is interesting that you approach security in the same manner as providing an IT service. Yes, both are evolving and moving towards being considered as peers in the boardroom .

But it is also important to consider that the mandates and goals for security and IT differ. Trying to roll security in the IT umbrella could be compromise the ability of the security organization being able to operate as an independent set of eyes for the business. IMHO, that is a very valuable aspect of this seperation and security should be regarded as a value added, not just a compliance measurement function.

Yes, security is going to be distributed/ntegrated across the IT operations groups and that is going to be challenging to implement but it is also important to maintain the individuality of the security organization.

• 
• 

• 
• 
• 

Full Talkback thread