Scenario:

A security risk has been identified for your workstations at your office.

As the CISO of a medium sized organization and you need to implement a security solution that will protect your workstations throughout the organization. You will need to procure the software solution, the services to install it, the services to maintain it and training for your staff.

Questions

1. How can a contract help to implement a security solution and support?

2. Which type or types of contract would you use?

3.What types of pricing/costing models would you use?

4.What types of risks would you be looking for as a contract executive?