Ten Ways IT Infrastructure Library® (ITIL®) Can Improve Information Security

Ten ways ITIL® can improve information security

There are a number of important ways that ITIL can improve how organizations implement and manage information security.

1. ITIL keeps information security service and business focused.
2. ITIL can enable organizations to develop and implement information security in a structured, clear way based on best practices.
3. With its requirement for continuous review, ITIL can help ensure that information security measures maintain their effectiveness as requirements, environments and threats change.
4. ITIL establishes documented processes and standards (such as SLAs and OLAs) that can be audited and monitored.
5. ITIL provides a foundation upon which information security can build. It requires a number of best practices - such as Change Management, Configuration Management and Incident Management - that can significantly improve information security.
6. ITIL enables information security staff to discuss information security in terms other groups can understand and appreciate.
7. The organized ITIL framework prevents the rushed, disorganized implementation of information security measures.
8. The reporting required by ITIL keeps an organization's management well informed about the effectiveness of their organization's information security measures.
9. ITIL defines roles and responsibilities for information security.
10. ITIL establishes a common language for discussing information security.