Some excellent words of wisdom from Mark Curphey
if you understand and document your process, your metrics and objectives, model and automate your process, understand and implement your process and optimise and process improvementRead the full post here: http://securitybuddha.com/2008/02/28/tenets-of-effective-bpm/………You Will
Implement a structured and effective information security program, understand the success criteria and track effectiveness, improve efficiency and reduce cost, produce fast and accurate compliance and audit data and ultimately do more with less and reduce the cost of security.