Supporting the organization's mission

As you are developing the information security program, it is critical that you work with your organization's senior management, business leaders, and system owners to determine what the needs are of your mission-focused entities. It is entirely possible that you could build a very secure information system that is completely useless to your business users if you do not include them in the process. You must have discussions about their mission activities, which will allow you to build a solution that allows those activities to continue in a secure manner.