The Security Plan determines suitable actions, controls and projects required to achieve the appropriate level of security for an organization in the short and medium term. One of its main objectives is to find a balance between the needs, the technological viability and the human and economic resources of an organization. In order to achieve this objective, the Security Plan is basically developed in three phases: First, definition and analysis of requirements; then, consolidation of results; and finally, planning of actions and projects.
|