Stages in IT Security Compliance

Symantec has released a very useful article to help businesses navigate the complexity of legislation and IT security compliance. The article a part of their new Enterprise Compliance Program.

Businesses are expected to show due diligence in data management. In order to reduce costs, it is best to organize the critical success factors in managing IT security compliance.

Symantec breaks security compliance into three main stages: define, control, govern. These stages and the corresponding details of each can be found in a handy graphic here.

1. Define: determine the compliance needs and come up with a compliance strategy
2. Control: establish an internal security control system and a program for improvements over time (continuous compliance management).
3. Govern: manage the whole compliance life cycle, from execution to reporting to notification management. Audit more frequently and invest in automatic solutions.

For more details, read here.

Tags: it security, security compliance, compliance, security policy, business security, compliance program