Re: ROI data

["gig" <gigabit () satx rr com>]

Gordan,

To answer you directly, no I don't have ROI data.  It seems to me that would 
be an extreme reach to claim ROI on the functions you mentioned.

I'm responding to your post because I was able to create two IT Security 
Architects positions using the issue of regulatory compliance as a driver. 
I started with a realistic Information Security Program gap analysis and 
simply outlined our deficiencies to management.

"you want these problems fixed, i'll need these types of positions to get it 
done"...and it worked.

To help you more fully requires an understanding of many things....your own 
title, your company business, size of current staff...even reporting 
structure is important.  (a concern for our company was the difference 
between enterprise architects and security architects)

good luck!



----- Original Message ----- 
From: <grmerrill () epbfi com>
To: <security-basics () securityfocus com>
Sent: Sunday, May 27, 2012 11:30 AM
Subject: ROI data


> Does anyone have current ROI data on implementing an IA architect 
> position?
>
> This is like an IT security Architect only focusing more on Security plan, 
> Business Continuity, Disaster Managaement, and Data Integrity.
>
> This would be an enterprise manager overseeing several systems admins 
> responsible in part for their own systems andintegrating all systems into 
> the master plan.
>
> This should also reflect the benefits of getting all of the above in line 
> as a benefit for meeting many compliance deadlines and integration dates.
>
> Thank You,
> Gordon R Merrill MSIA
> Information Assurance Professional
> GRMerrill () epbfi net
>
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL 
> certificate.  We look at how SSL works, how it benefits your company and 
> how your customers can tell if a site is secure. You will find out how to 
> test, purchase, install and use a thawte Digital Certificate on your 
> Apache web server. Throughout, best practices for set-up are highlighted 
> to help you ensure efficient ongoing management of your encryption keys 
> and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------