Security Mission Statement

The security mission statement is determined by a number of factors:

Security expectations of users and customers
Customer loss by security breaches
Customer loss by impaired functionality (due to security)
Past down-time and monetary loss due to security incidents
Insider threats
User trust
Local and remote access
On-line sensitive or personal information
Loss due to compromise or theft
Different levels of security for different parts of your organization
- ERP systems
- Development
- Customer support
Cost of negative publicity
Existing security guidelines, regulations, or laws
Conflict of business requirements and security
Importance of confidentiality, integrity, availability
Business needs
Financial constraints