ISACA's Business Model for Information Security Model

This picture is the ISACA's Business Model for Information Security.



According to ISACA, the Business Model for Information Security is made up of four elements and six dynamic interconnections. It can be viewed as a three-dimensional model, best visualized as a pyramid. All aspects of the Model interact with each other. If any one part of the Model is changed, not addressed or managed inappropriately, it will distort the balance of the Model.

The Elements are : Organization Design and Strategy, People, Process and Technology.
The Dynamic Interconnections linking these elements are : Culture, Architecture, Governance, Emergence, Enabling and Support, and Human Factor.

Really impressive illustration.