A few weeks ago, Ravi Char posted Maslow’s hierarchy of security posture? which breaks breaks out the security posture of a business as one of five postures: Don’t Care for Security, Security Exists, Basic Security, Managed Security, and Constantly Improving Security.
As Mike Rothman points out,
there is no free lunch and if you want to go from one level to the next – there is a cost. It’s probably money, but it’s also time and training resources … there is a right place on the pyramid for every organization and you need to figure out where that right place is.