I would like to ask about how can someone adopt certain security model in the organizations what are the criteria that controls how I can pick the best security model for my organization
For example I have set up an security services (pentest- vulnerability assessment- secures network desing) and security training org. I want to adopt on the Ifo. Sec. mngt. model but I don't know what should I look for when choosing the proper model.