Securing Business Information: Strategies to Protect the Enterprise and Its Network

Two IT consultants from the META Group describe their approach to business information security. The Enterprise Security Plan (ESP) is a six-step process for securing the computing infrastructure within the constraints of normal business operations. Coverage includes, for example, conducting a baseline security analysis, prioritizing projects, projecting demand curves, and understanding single sign- on (SSO) product architectures. A sample Request For Proposal (RFP) is found in the appendix. Annotation c. Book News, Inc., Portland, OR (booknews.com)