How to build IT Security Plan within 3 simple steps

So here is the step by step how to build IT Security Plan:
First, we implemented the use of project teams on as many different aspects of our security business as we could think of. These teams had two goals to accomplish: find the best internal or external practice for the specific area they are looking at and — even more important — increase open communications across the organization.

Second, we implemented a measurement program to find the defects in our processes. To make this successful, I declared this to be a “no fault” measurement program. The primary “failure” in this program would be if you did not find problems. The secondary failure would be if we did not fix the problem.

Third, we launched a massive campaign to do national contracts and centralized systems to eliminate as many redundancies and inefficiencies as possible. All of this combined translated into massive change for our people and our strategies in the way we implemented security.