Serve as a guide
It sets the timeline for implementing the measures that reduce risk.
Governance & Strategic Planning
Information Security Master Plan
We define and prioritize the security projects that bring your organization's risks down to acceptable levels.
What is a Security Master Plan?
A security roadmap aligned with the business
A Security Master Plan (SMP) defines and prioritizes a set of information security projects to reduce the organization's risks to acceptable levels, based on an analysis of the starting point.
It's built after a risk analysis, to understand where you start and set where you want to go.
A good SMP aligns with the company's strategic objectives, defines its scope and incorporates the obligations and best practices that employees and third parties must follow.
Objectives
What a Security Master Plan is for
Identify exposed areas
It detects which areas are most exposed to attacks, leaks or unforeseen events.
Understand risks and threats
It shows which risks your information assets are exposed to, with their likelihood and consequences.
Implement measures
It creates and implements the security measures needed to prevent risks.
Phases
Six phases, from the current situation to go-live
- 1Understand the current situation: technical, organizational and regulatory analysis, with participation from every area and support from leadership.
- 2Understand the organization's strategy: current and future projects, growth, reorganizations, budget and ICT strategy.
- 3Define projects and initiatives to reach the required security level.
- 4Classify and prioritize projects, with budget and timeline: short, medium and long term.
- 5Approve the Plan: leadership reviews it, adjusts scope or priorities and communicates it to the whole organization.
- 6Roll out the approved plan.
Phase 3 in detail
Initiatives, actions and projects
Initiatives
They improve current ways of working so they cover the controls of the regulatory framework.
Actions
They address the missing or insufficient technical and physical controls we detect.
Projects
They define the strategy for managing risks that exceed your acceptable risk level.
Benefits
What your organization gains
Visibility into exposure
You know which areas are most exposed to attacks, leaks or unforeseen events.
Internal policies
You have internal rules that govern the company's security.
Known risks
You know the risks your systems are exposed to.
Contingency ready
You have contingency plans and measures ready.
FAQ
What clients ask us most
What is a Security Master Plan?
A roadmap that defines and prioritizes the security projects needed to bring the organization's risks to an acceptable level, aligned with its business objectives.
How is it built?
In six phases: understanding the current situation, defining objectives, analyzing risks, identifying initiatives and projects, prioritizing them and putting them into action.
Need a Security Master Plan?
We support you from the initial analysis to implementation.