Most companies spend too much money on the wrong security projects. Security initiatives should be mapped directly to business needs, not technical threats. IT security staff generally use security terms and principles to describe minimizing technical threats with technical means. Business managers are more concerned with the success and performance of a business process than the underlying technology. The key to success in focusing security efforts on business value is effective communication between business leaders and IT management. In order to map their respective needs to one another, the four A’s answer the following questions:Authentication, Authorization, Administration and Audit.”]
Source: https://www.csoonline.com/article/2116336/cso-focus-on-the-business.html