11.2. The Icing

This section discusses ideals for your security program. To be able to achieve these goals, you will need to have a solid infrastructure and security program already in place. One of the ideals of the security team and the information-protection team should be to make security awareness pervasive throughout the company. The security team should also, ideally, stay up to date with the industry, which means maintaining contacts within the industry and tracking new technologies and directions. Another ideal for the security team is to be able to produce metrics to describe how the team is performing and the benefits of the security program.

11.2.1. Make Security Pervasive

A good information-protection program will make everyone aware of security and intellectual property issues. For example, at a company where Christine worked, the information-protection team and the marketing group ran an awareness campaign that included a series of cartoon posters of some common ways that information was stolen and raising awareness of laptop theft at airports.