{"id":238082,"date":"2022-05-18T15:09:00","date_gmt":"2022-05-18T15:09:00","guid":{"rendered":"https:\/\/www.seekingfire.com\/?p=238082"},"modified":"2022-06-03T03:16:23","modified_gmt":"2022-06-03T03:16:23","slug":"the-four-stages-of-cybersecurity-program-development-part-two","status":"publish","type":"post","link":"https:\/\/www.seekingfire.com\/business\/the-four-stages-of-cybersecurity-program-development-part-two\/","title":{"rendered":"The four stages of cybersecurity program development \u2014 part two"},"content":{"rendered":"\n

Welcome to part two in our series on security program development (i.e. creating a cybersecurity posture for your organization’s distinct needs). As a general rule, security program development typically follows four key phases for most organizations, with each subsequent phase building on the last. If you haven’t read part one on the initial stage or the foundational phase, you can find that post here<\/a>. This article will look at phase two, or the Security Program Planning stage.<\/p>\n\n\n\n

Phase Two of Security Program Development<\/h2>\n\n\n\n

Now that you’ve gone through the foundational phase of developing your security program, several vital basics should be in place to protect your organization. However, these basics are rather general and aren’t specific to the threats and risks that your industry faces, the strategic objectives of your business, or the requirements of your customers. You can add some of these critical pieces to your security program in phase two. <\/p>\n\n\n\n

To get the ball rolling, begin by doing some deep discovery work to understand the requirements of your business. Consider questions such as the following:<\/p>\n\n\n\n