Business drivers for investing into information security. Both imaginary and real reasons, as observed by over 10 years of security consultancy experience. (c) Nixu Oy, Petri Kairinen

1. Business drivers for information
security
Imaginary
 Information security is very
important, because it is so
important
 We’ve done risk analysis and
there are some risks we can
not tolerate
 We want to comply with the
best practices and regulations
 We are afraid of losing our
confidential information (client
database)
25.11.2013
© Nixu 2013
1

2. Business drivers for information security
Imaginary
…and real ones
 Information security is very
important, because it is so
important
 #%& hit our or our neighbors
fan
 We’ve done risk analysis and
there are some risks we can
not tolerate
 Our client or a body with
punishment power is
demanding actions from us
 We want to comply with the
best practices and regulations
 We are actually seeing
industrial espionage against
our R&D
 We are afraid of losing our
confidential information (client
database)
 We can cut costs with
information security
measures*
25.11.2013
© Nixu 2013
2