Implementing an Effective IT Security Program
The purpose of this paper is to take the wide variety of US federal laws, regulations, and guidance combined with industry best practices and define the essential elements of an effective IT security program. The task may seem impossible given the thousands of pages of security documentation...
