Secure This: Organizational Buy-in (A communications approach)

In order for a security plan to be effective, it must enjoy full support from an organization's executive leadership. Seems like a simple truth? It is, but securing that backing is not as simple. One of the roles the information security officer must fill is that of a salesman, not only to corporate leadership but also to rank and file staff. Top-to-bottom organizational buy-in is one of the most important elements that will dictate whether an information security plan, and its associated policies and procedures, are effective. This paper will discuss the importance of buy-in and will recommend methods for soliciting and securing buy-in using a communications theory perspective. It is not the intention of the author to explore the topic in depth; rather, the purpose is simply to offer ideas which merit further exploration and discussion.