How to raise the profile of your information security department

As Australian CIOs see information security as a lower priority than reducing costs maybe it is time for us to go on the charm offensive? Some ideas follow : Try an end user security awareness program in a handy tips flavor focusing on social engineering and malware; look at your branding esp your motto ; provide communications to stakeholders on your organisations most critical apps and what you are protecting then from and business process impact if there is an incident ; benchmark your operations against your peers; produce easy to understand risk based management reporting supported by a security metrics program

---- 
Sent using a Sony Ericsson videophone