In order to create a secure environment the organisation needs to have a plan in place to achieve its aims and objectives. All security measures should be proactively managed, this means that security measures should be planned.
Security measures can be expensive and it is important to track these costs to enable effective budgeting. You need to show that you know what resources (e.g. people, time, money and technology) are used within the organisation to create a secure environment and that this is an efficient use of available resources.
