Making Business Sense of Information Security

A well-managed security program starts at the top and must provide strong governance, business risk management, auditing, and control processes. This Burton Group study proposes a security technology vision whose key components are flexible and fine-grained zoning, more trustworthy systems, Internet identity, better-protected service-oriented architectures, advanced content control, trust frameworks, and an organization-wide control system for information protection. Burton Group (www.burtongroup.com) provides technically in-depth research and advisory services for colleges and universities, government agencies, and commercial enterprises. Burton Group's practical and unbiased research and advice helps technologists make smart IT infrastructure decisions in increasingly complex environments. Burton Group covers directories, identity management, application platforms, architecture, and network and telecom infrastructure topics. Like ECAR, Burton Group is an unbiased advocate for the user and more than 80% of Burton Group's clients are user organizations rather than suppliers. EDUCAUSE member institutions can become users of Burton Group research services through EDUCAUSE pricing. Burton Group is an ECAR partner and can be contacted by email at slesueur@burtongroup.com or by telephone (801-373-5767).