Kevin Beaver’s Post

View profile for Kevin Beaver, graphic

Independent Information Security Consultant, Writer, and Professional Speaker

I cannot tell you how often I still see this...an unfunded IT or security mandate is NOT a mandate. Be careful! https://lnkd.in/erEzfsx #CISO #CIO #infosec

An Unfunded Mandate Is Not a Mandate

An Unfunded Mandate Is Not a Mandate

https://securityintelligence.com

Peter T. Davis

For more than 60,000 hours, providing IT Governance, Compliance, Security & Audit Consulting Worldwide

1mo

Kevin Beaver, I cannot tell you how many times I have reviewed ISO 27001 certification audit reports and they justify the requirement for management support as asking them "Do you support the ISMS?". This may shock you but those going for certification respond "Yes". I know I am a dinosaur, but I would want to see the strategy, the budget based on the strategy, the approval or rationale for disapproval. Show me the money. I don't want your moral support, I want your money. This is why I guess people think I am hard on them.

To view or add a comment, sign in

Explore topics