Need answer. Thank you. With blending IT expertise with a non-IT perspective, how can the organizations enhanceoverall information security effectiveness? According to a global information security survey by the giant E&Y in 2010, in 46% of casesfirms have reported an increase in investment in information security. The report also indicatesthat 60% interviewees feel that the use of cloud computing, smartphones, social media andother personal gadgets have posed a higher risk to information security. However, a firm mustkeep a proper mix of managerial, behavioral and technical aspects of information security toovercome the data risk challenges.Organizations have substantially improved information security programs to addressaccelerating threats. They have added new features to their information security systems,redefined strategies, installed new information security function components and added morepeople. These step-by-step adjustments have undoubtedly improved information securitycapabilities. It just hasn't improved them enough.Traditionally, IT departments do not have a formal risk landscape or assessment mechanismsomething that is fundamental to the risk function. This may explain why 52% oforganizations do not have a threat intelligence program currently in place. Without adisciplined approach to researching and monitoring threat intelligence, the IT function is notonly unable to proactively address current threats; it also has no way of anticipating the threatsthat are lurking just around the corner. This only reemphasizes the gap. It's a familiar refrain,particularly in today's era of economic volatility and spending restraint: too much work, notenough resources. But a lack of resources only tells part of the story. Information securitydoesn't just need more resources; it needs people with the right skills and training to meetrapidly evolving changes in the information security landscape.The article above demonstrates the trend and survey of information security from Year 2010to Year 2012 by E&Y. Based on your opinion, discuss the followings with justification:

Question

Accepted Answer

Information security can be enhance with non IT perspective by following ways
1. Administrative
-…

With blending IT expertise with a non-IT perspective, how can the organizations enhance overall information security effectiveness?