HTTP/2 302 server: nginx date: Sat, 02 Aug 2025 14:44:23 GMT content-type: text/plain; charset=utf-8 content-length: 0 x-archive-redirect-reason: found capture at 20090619014932 location: https://web.archive.org/web/20090619014932/https://www.csoonline.com/topic/43412/Strategic_Planning server-timing: captures_list;dur=0.633790, exclusion.robots;dur=0.025684, exclusion.robots.policy;dur=0.010750, esindex;dur=0.013340, cdx.remote;dur=31.873335, LoadShardBlock;dur=309.630518, PetaboxLoader3.datanode;dur=85.802490, PetaboxLoader3.resolve;dur=119.154855 x-app-server: wwwb-app204 x-ts: 302 x-tr: 378 server-timing: TR;dur=0,Tw;dur=0,Tc;dur=1 set-cookie: wb-p-SERVER=wwwb-app204; path=/ x-location: All x-rl: 0 x-na: 0 x-page-cache: MISS server-timing: MISS x-nid: DigitalOcean referrer-policy: no-referrer-when-downgrade permissions-policy: interest-cohort=() HTTP/2 200 server: nginx date: Sat, 02 Aug 2025 14:44:23 GMT content-type: text/html;charset=UTF-8 x-archive-orig-date: Fri, 19 Jun 2009 01:49:29 GMT x-archive-orig-server: Apache/1.3.37 (Unix) Resin/3.0.22 x-archive-orig-content-language: en-US x-archive-orig-connection: close x-archive-orig-set-cookie: NSC_djp.dpn=44593cbe3660;expires=Fri, 19-Jun-09 02:01:34 GMT;path=/ x-archive-guessed-content-type: text/html x-archive-guessed-charset: iso-8859-1 memento-datetime: Fri, 19 Jun 2009 01:49:32 GMT link: ; rel="original", ; rel="timemap"; type="application/link-format", ; rel="timegate", ; rel="first memento"; datetime="Sun, 13 Apr 2008 03:19:57 GMT", ; rel="prev memento"; datetime="Sun, 19 Apr 2009 05:28:47 GMT", ; rel="memento"; datetime="Fri, 19 Jun 2009 01:49:32 GMT", ; rel="next memento"; datetime="Fri, 26 Jun 2009 07:08:06 GMT", ; rel="last memento"; datetime="Fri, 04 Apr 2014 17:09:10 GMT" content-security-policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: archive.org web.archive.org web-static.archive.org wayback-api.archive.org athena.archive.org analytics.archive.org pragma.archivelab.org wwwb-events.archive.org x-archive-src: 52_10_20090618212835_crawl100-c/52_10_20090619014734_crawl100.arc.gz server-timing: captures_list;dur=0.646268, exclusion.robots;dur=0.021600, exclusion.robots.policy;dur=0.009581, esindex;dur=0.012414, cdx.remote;dur=130.817783, LoadShardBlock;dur=191.728479, PetaboxLoader3.datanode;dur=199.372956, PetaboxLoader3.resolve;dur=160.768025, load_resource;dur=194.629916 x-app-server: wwwb-app204 x-ts: 200 x-tr: 668 server-timing: TR;dur=0,Tw;dur=0,Tc;dur=0 x-location: All x-rl: 0 x-na: 0 x-page-cache: MISS server-timing: MISS x-nid: DigitalOcean referrer-policy: no-referrer-when-downgrade permissions-policy: interest-cohort=() content-encoding: gzip

CSO

Security Leadership

• Newsletters
• RSS
• Solution Centers
• Resource Alerts
• White Papers
• Webcasts
• Podcasts
• Video
• Events
• Magazine

• Data Protection
  • Application Security
  • Network Security
  • Wireless/Mobile
  • Malware/Cybercrime
  • Privacy
  • PCI and Compliance
  • Audit
• Other
• Identity & Access
  • Access Control
  • Identity Management
  • Federated IDM
  • Identity Theft
• Business Continuity
  • Preparedness
  • Disaster Recovery
  • Supply Chain
  • Pandemic
• Physical Security
  • Video Surveillance
  • Employee Protection
  • Fraud
  • Loss Prevention
  • Investigations/Forensics
  • Critical Infrastructure
• Security Leadership
  • Compliance
  • Exec. Communication
  • Awareness
  • Strategic Planning
  • Metrics/Budgets
  • Industry
  • Global
  • Career/Staffing
• Basics
• Tools & Templates
• Security Jobs
• Blogs

Get RSS feed

Home » Security Leadership » Strategic Planning

How to Write an Information Security Policy

Jennifer Bayuk explains the critical first step, what to cover and how make your infosec policy - and program - effective.

» full story

Next Stop for Security: Business Intelligence and Business Services

CSO Editor in Chief Derek Slater looks at how security can build on today's (relatively) high appreciation of risk management.

» full story

Obama Could Name Cybersecurity Czar This Week

Adviser would likely have direct access to the president.

» full story

» View all Strategic Planning articles

Featured Blogs

» more blogs

The Brave New World of InfoSec

by Jeff Bardin

• Violation of National Sovereignty
• PCI Assessment Done - RIF'd -- Had Enough - Retire
• Spending Money on Useless Research

Movers & Shakers

by Movers and Shakers

• Routh Joins KPMG as CISO
• US Bancorp Names CSO
• Partners Healthcare Names Aske CISO

RESOURCE CENTER

buy a link »

Recent Articles

• How to Write an Information Security Policy
• Next Stop for Security: Business Intelligence and Business Services
• Obama Could Name Cybersecurity Czar This Week
• Piracy Expert: Maersk Alabama One Slice of a Huge Pirate Problem
• Report: Security Tops IT Budget Priorities
• Data Security: Whose Job Is It Really?
• 5 Steps to Communicate Security's Value to Non-security People
• 5 Tips for Managing Security in a Recession
• Excerpt: What Should Your Security Strategies Be?
• Obama Plan Says Cyber Infrastructure 'Strategic'

VIRTUAL CONFERENCE

Security Virtual Conference
Presented by CIO, CSO, and Networkworld

Attend this free, 100% online event on demand. Hear from experts on managing compliance mandates, insider threats, and much more.

» Learn more and register here

WHITE PAPER

Email Continuity: Don't Know What You've Got Till it's Gone

Today, more email is being sent and attachment sizes are becoming larger. This means that security, archiving, and continuity systems must be able to scale easily. Learn to manage your email better…

» View this White Paper

• More Headlines
• Change Topic
  • Data Protection
  • Identity & Access
  • Business Continuity
  • Security Leadership

Data Protection

• Blogger: Windows 7 UAC Feature Still Vulnerable
• Five Steps to HITECH Preparedness
• Google Trying for More Gmail Security
• With Unrest in Iran, Cyber Attacks Begin
• An Investigator's Toolkit: 5 Free Tools to Send Anonymous Messages
• How to Write an Information Security Policy
• With Unrest in Iran, Cyber-attacks Begin
• Microsoft Sues Three For 'Massive' Click Fraud Scam
• PCI Debate Ignores Planned Improvement Cycle
• 5 Mergers for a Less Aggravating IT Security Industry

Identity & Access

• Batteries.com, Insurance Firm Report Data Breaches
• New Travel Rules Amid Concerns over RFID-tagged Passport Cards
• The Final 5 Tweets of Harold Wigginbottom, Tech-Savvy CEO
• Insider at Cal Water Steals $9M and Runs
• Botnet War: The Story So Far
• Accountability in Enterprise Wireless Deployments
• Most Claims Dismissed in Hannaford Data Breach Suit
• Problem Solved: 3 Tales of Systems Architecture Dilemmas
• Johns Hopkins Tells Patients: Employee Stole Data for Fraud
• How SCAP Brought Sanity to Vulnerability Management

Business Continuity

• WHO Declares Swine flu a Pandemic. Now What?
• Survey: Business Continuity Plans Factor in Mobile, Social Networking
• Security Wisdom Watch: Swine Flu Edition
• Swine Flu: A Wake-up Call for Emergency Planners
• Swine Flu: Now That the Hype Is Over, Keep Planning
• New Cyber-Security Standards for N. American Power System
• 10 Questions for Pandemic Planning
• Swine Flu: What Exactly Does Phase 5 Mean?
• Swine Flu: To Fear is to Fail
• Swine Flu: How to Make Biz Continuity Plans

Security Leadership

• How to Write an Information Security Policy
• 5 Mergers for a Less Aggravating IT Security Industry
• Next Stop for Security: Business Intelligence and Business Services
• Brand Protection: The Expanding CSO Portfolio
• Symantec, McAfee to Pay Fines Over Auto-renewals
• Evolution of the CSO
• State of the CSO: Security's Influence Grows; Will It Last?
• Summer Reading for Security Pros: Schneier or Sagan?
• DHS Names Key Cybersecurity Staff
• Security Analyst to DLP Vendors: Watch Your Language

ESSENTIAL READING

5 Steps to a Strategic Plan

13 Steps to Start a Strategic Security Group

Jeff Spivey on ERM

Holistic Security Management

Succession Planning

Webcasts

• Advancing Information Protection with a Built-In Approach
• Jump Start Application Security Initiatives with SaaS
• Gartner Video: Best Practices for Web Application Security and Compliance
• Data Breaches: The Cost of Being Unprepared- Thought Leadership Panel Perspectives
• 2009 Data Breach Investigations Report

White Papers

• Losing Ground: 2009 TMT Global Security Survey
• Millennial Meltdown: Balancing Innovation with Productivity and Security
• The Tripwire HIPAA Solution: Meeting the Security Standards Set Forth in Section 164
• Configuration Assessment: Choosing the Right Solution
• Beyond PCI Checklists: Securing Cardholder Data with Tripwire's Enhanced File Integrity Monitoring
• Addressing Compliance Initiatives with Tripwire and the Center for Internet Security

Resource Alerts

Get instant notifications when whitepapers, webcasts and case studies are added to our library. Sign up for a Resource Alert now!

 

CSO Corporate Partners

Event

Digital ID World

• September 14 - 16, 2009
  Rio Hotel and Casino
  Las Vegas, Nevada
  Register Now »

(ISC)2 members can earn up to 24 CPE Credits!
Reference priority code ONLINE and attend the full conference for the reduced rate of $995!

White Papers

Losing Ground: 2009 TMT Global Security Survey Millennial Meltdown: Balancing Innovation with Productivity and Security The Tripwire HIPAA Solution: Meeting the Security Standards Set Forth in Section 164 Configuration Assessment: Choosing the Right Solution Beyond PCI Checklists: Securing Cardholder Data with Tripwire's Enhanced File Integrity Monitoring Addressing Compliance Initiatives with Tripwire and the Center for Internet Security File Integrity Monitoring: Secure Your Virtual and Physical IT Environments Compliance Rules: Best Practices for Cost-Effective, Comprehensive Compliance Protecting What Matters: The 6th Annual Global Security Survey Managing a growing threat: an executive's guide to Web application security

Unlock the Power of Device ID to Combat Online Fraud and Abuse Every Man's Guide to Combat Threats Within Your Organization Credit Issuers: Stop Application Fraud at the Source with Device Reputation Dangerous Collaboration Practices: 5 Ways IT Can Minimize Risk Identifying and Addressing Evolving Threats Email Continuity: You Don't Know What You've Got Till it's Gone Monitoring Enterprise-wide Business Risk Get Sophisticated About Your Web Application Security The Application Security Imperative How Are Open Source Development Communities Embracing Security Best Practices? More White Papers »

Featured Sponsors

Sponsored Links

Free IS Hiring Manager Resources Millennial Meltdown: Balancing Innovation with Productivity and Security Dangerous Collaboration Practices: 5 Ways IT Can Minimize Risk Get agile IT security with CA Security Management Think your data is safe? Register for a free assessment. Or get our ebook now. Losing Ground: 2009 TMT Global Security Survey Gartner Video: Best Practices for Web Application Security and Compliance Monitoring Enterprise-wide Business Risk Now is the Time to Protect Your Critical Information Assets 2009 Gartner Magic Quadrant for Static Application Security Testing Achieving Software Security with Wipro Security Assurance Center Services CISO's Guide to Commercial Off-The-Shelf Software (COTS) CISO's Guide to Outsourcing CISO's Guide to Application Security

Protect your vital information from insider risks and ensure compliance. 64-page prescriptive guide to security, compliance, and IT operations VISIT CDW.com TODAY FOR ALL YOUR TECHNOLOGY NEEDS. Special Online Fraud Report: What to Expect in 2009 and Beyond Jump Start Application Security Initiatives with SaaS Stop Application Fraud at the Source with Device Reputation Data Breaches: The Cost of Being Unprepared Secure Your Enterprise With a Holistic Approach How Are Open Source Development Communities Embracing Security Best Practices? Advancing Software Security Assurance in the Enterprise CISO's Guide To Creating and Managing the Secure Development Lifecycle (SDLC) CISO's Guide to Securing Open Source Software CISO's Guide to Web 2.0 Security Get Sophisticated About Your Web Application Security

• Home |
• About |
• Privacy Policy |
• Terms of Service |
• Subscription Service |
• Advertising |
• Events |
• Site Map

THE IDG NETWORK

• CIO |
• Computerworld |
• GamePro |
• Games.net |
• IDC |
• IDG |
• IDG Connect |
• IDG Knowledge Hub |
• IDG TechNetwork |
• IDG Ventures |
• IDG.net |
• InfoWorld |
• ITworld |
• ITwhitepapers |
• JavaWorld |
• LinuxWorld |
• Macworld |
• Network World |
• PC World |
• The Industry Standard