by Andrew Shumate | Aug 16, 2016 | InfoSec Risk Assessment
Reading Time: 3 minutes
Risk assessment is a fascinating activity that is relevant to everyone, all the time, and involves both our individual, subjective interpretation and the pure objectivity of statistics. Money, power, security, survival, rationality,...
by John Verry | Oct 25, 2010 | InfoSec Risk Assessment
Reading Time: 4 minutes
Just finished my nth (non-fulfilling) conversation on our approach to Information Security Risk Assessments with our Audit Lead. It still amazes me that something so fundamentally logical/right is so challenging to execute well. It...