Security Park, the leading online news site for security professionals
Home | About us | Contact us | Submit an article | Advertise | Sales leads | Newsletter | RSS Newsfeed | SEARCH




Develop an ISO 27001-compliant Information Security Management System
This useful guide clarifies the steps you have to follow to develop an ISO 27001-compliant ISMS. Each step is integral in how secure your information security system is.

Need a
reference book?
Find it on Amazon:
Security books and magazines in association with Amazon.co.uk

SecurityPark Research Library

Help | Advanced Search
What's New?
What's Popular?
Who's Had a Taste of Your Intellectual Property?
sponsored by Information Security Magazine
Posted:  13 May 2007
Published:  01 May 2007
Format:  HTML
Length:  6   Page(s)
Type:  Journal Article
Language:  English


ABSTRACT:
Despite the increasing sophistication of technology, there's no magic bullet for protecting IP. An effective protection program must include a number of strategies, including educating employees, contractors and partners about what constitutes trade secrets; establishing the right governance model (policies, roles and responsibilities, enforcement); process-level controls and procedural, physical and technical controls to minimize risk to a level acceptable by management.

The first step to protecting your trade secrets is to identify them through interviews with the business process owners and document them. Next, estimate how much these trade secrets are worth. Although this is just a snapshot that will change over time, it's essential for building a business case to obtain the funding to put protections in place. Having this valuation is also important should a theft actually occur. "It's a complicated process to do this, but a critical element for prosecutors," says the FBI's Schadler. Then, rank the trade secrets according to their value as well as the threats, vulnerabilities and resulting risk.

A comprehensive education and awareness program is a critical step; some experts argue that it's the most important one. Finally, your company should define programmatic, compliance and operational metrics to measure the performance of your trade secret protections against key indicators. Without the metrics, you will not know whether you are effectively protecting your trade secrets.


Authors

Russell L. Jones
Partner ,  Deloitte & Touche

Rena Mears
Partner ,  Deloitte & Touche
Rena Mears, CISSP, CISA, CIPP, CPA, a partner, is the national and global service offering leader of Deloitte & Touche's privacy and data protection team and Northern Pacific regional leader for Deloitte & Touche's security and privacy service.



BROWSE RELATED RESOURCES
Data Security | Industrial Espionage | Information Security | Intellectual Property

View All Resources sponsored by Information Security Magazine

Library Home | Advertise with Us | Product Library
A Service of Bitpipe