Why is methodology important in the implementation of information security?

A methodology is a formal technique that has a structured sequence of procedures that is used

to solve a problem. Methodology is important in the implementation of information security

because it ensures that development is structured in an orderly, comprehensive fashion. The

methodology unies the process of identifying specic threats and the creation of specic

controls to counter those threats into a coherent program. Thus, a methodology is important

in the implementation of information security for two main reasons.

(a) First, it entails all the rigorous steps for the organizations' employees to follow, therefore

avoiding any unnecessary mistakes that may compromise the end goal (i.e., to have a

comprehensive security posture).

(b) Second, methodology increases the probability of success. Once a methodology is adopted,

the personnel selected will be responsible for establishing key milestones and made ac-

countable for achieving the project goals.