The Cyber Security Handbook – Prepare for, respond to and recover from cyber attacks

CHAPTER 22: STEP 5 – ESTABLISH A CONTINUAL IMPROVEMENT MODEL

Whatever continual improvement method or model you use, and wherever your inputs come from, it is critical that it is cyclical to ensure you keep your improvements both regular and manageable. Some example methods are discussed in more depth in 15.2.3 and 15.2.4.

Continual improvement is not just something you do at the end of a project, however. Particularly for a more complex project, as cyber security may well be, it can be a useful way of taking an incremental, step-by-step approach to implementation, with brief reviews between each step to make sure that you are heading in the right direction and that your target state is still relevant.⁹⁶

To enable that incremental, manageable ...