Broad Outline of Security Plan (RFC 2196)

• Identify what you are trying to protect.
• Determine what you are trying to protect it from.
• Determine how likely the threats are.
• Implement measures which will protect your assets in a cost-effective manner.
• Review the process continuously and make improvements each time a weakness is found.

Cost of protecting yourself against a threat should be less than the cost of recovering if the threat were to strike you.