Home > Intel Communities > Open Port IT Community > IT@Intel > Blog > Tags > whitepaper

IT@Intel Blog

3 Posts tagged with the whitepaper tag
0

Intel developed a defense-in-depth strategy to optimize information security using interlocking prediction, prevention, detection and response capabilities. It is a structure designed to support consistent and comprehensive security controls throughout the organization while allowing flexibility needed to manage risk.

 

 

 

It promotes continual improvement, maturity of security services, and adaptability to evolving threats. At Intel, proliferation of the defense in depth methodology has resulted in more efficient business decisions. The fundamental aspects allows for consolidation of support resources, helps highlight alternative methods for managing risk, aligns programs across environments, and keeps focus on achieving optimal security.

 

 

Download the whitepaper: Defense In Depth Strategy Optimizes Security

 

 

Defense in Depth Information Security Strategy

 

The Problem of Measuring Information Security

 

Getting a Return on IT Security Investment

0 Comments Permalink
0

Measuring the value of information security programs is difficult and a problem for the entire industry. In the second of the three part series, Intel discusses a practical approach to determine value of information security initiatives. Intel security professionals Tim Casey, Enrique Herrera, and Matthew Rosenquist discussed the success of Intel’s security value methodology outlined in the Whitepaper - Measuring the Return on IT Security Investments

 

 

 

Listen to how Intel utilizes this strategy as one means to measure the value of security programs. The whitepaper is available for download.

 

The 30 minute discussion can be replayed here:

 

 

 

 

The last of the three part series, Future State of Security Measurement, will occur on Wednsday June 4th. Everyone is welcome to participate or just listen in. Details can be found here:

http://communities.intel.com/openport/blogs/it/2008/05/12/how-do-you-measure-something-that-doesnt-happen

0 Comments Permalink
31

Intel IT developed a model for measuring Return on Security Investment (ROSI) in our manufacturing environments that produces a much higher level of accuracy than other methods currently available. Our model has enabled us to make business-driven decisions about security programs, resulting in savings in excess of USD 18 million per year in avoided losses.

 

 

 

 

Whitepaper now Available! Measuring the Return on IT Security Investments

 

Quantifying value for security programs is difficult at best. Intel successfully developed and employed a method to measure the value of security programs across our worldwide factories. Although not the silver bullet to measure all security programs, it does show in some circumstances, value can be quantified to the level needed to make sound business decisions.

 

 

This is one of many different methods which Intel leverages to determine value of security programs. The difference is being able to tie in hard numbers for prevented losses and the ability to predict future impacts with reasonable accuracy. Other available methods rely on more qualitative descriptions of value and lack a dollar and sense measure. Although no single methodology fits all situations, Intel has found a niche for this insightful metric which is an empowering view of security value.

 

Other related blogs:

 

Practical Aspects of Measuring Security

 

Getting a Return on IT Security Investment

 

Managing the Effort to Measure Security

 

The Problem of Measuring Information Security

 

The Four Dirty Questions of Measuring Information Security

31 Comments Permalink