If you've been "blessed" with the opportunity to build a new information security program from scratch or re-engineer an existing program, then you know how difficult it can be. Where to begin can seem like an insurmountable challenge. Added to this challenge is the fact that you're fixing the airplane while it's in flight.
Although there are some obvious issues that have to be dealt with early, no two organizations start from the same point or have the same technology, process, or people issues.
Leveraging RMI's Risk Program Management (RPM) framework, we can untangle the mess and help prioritize the development of your program.