Like many in the computer security business, I consider the annual Computer Security Institute/FBI survey worth reading. However, as some of my colleagues have been pointing out for years, it has serious limitations as a basis for decision-making.

The classic paper on this is Dr. Michel Kabay's ...

[ more ]  [ reply ]