The function of information security is splitting into two, with security technology implementation moving back into the IT department and the administration of information security becoming a management issue.
"The business doesn't care about 99.9 per cent uptime unless you're talking about the uptime of a business process or an end-to-end capability," says Peter Weill, director of the Center for Information Systems Research and senior research scientist at the MIT Sloan School of Management.