Tips For Security Purchasing
I don't know how many of you in the AO community have enough pull at your respective companies to be involved in medium to enterprise level purchasing decisions, but it you have any insight I would appreciate it.
What are the things that you think are essential to factor into a purchasing decision or to consider when selecting a product or vendor or making a purchase?
Re: Tips For Security Purchasing
Quote:
Originally posted here by tonybradley
I don't know how many of you in the AO community have enough pull at your respective companies to be involved in medium to enterprise level purchasing decisions, but it you have any insight I would appreciate it.
What are the things that you think are essential to factor into a purchasing decision or to consider when selecting a product or vendor or making a purchase?
If you're asking that on the Internet, and your resources permit, you presumably need to consult professional risk management. There is only one member that I know of that has experience in professional security risk management and that's catch.
I know this much. One of my clients received a $23 million dollar loan last year from a big oil and gas investor. Before that loan committee granted it to them. The committee wanted proof of implemented risk management. I had another client who received a grant for a large sum of money as well. They wanted risk management, internal auditing and whatnot.
I don’t know if you carry that kind of pull, but even smaller businesses consult risk management. It’s just smart practice.
But since you mentioned security, you might want to refer to the NCSC-TG-004-88 on risk management. It’s a little different.