Proactively Managing Security Risk

Proactively Managing Security Risk
Naresh Verma, Yih Huang, and Arun Sood

The information technology revolution has changed the way business is transacted, governments operate, and national defense is conducted. Protection of these systems is essential and continuous efforts to protect them have resulted in exponential growth in reported security incidents. There are threats from hackers, spies, corporate raiders, terrorists, professional criminals, and vandals -- all of whom have a vested interest and well defined objectives for challenging the technology for financial and political gain, leading to damages to the enterprise infrastructure.

Proactively Managing Security Risk 2007-11-14
BelSec

I've read this paper with great interest, however I don't feel like this way of approaching risk holds up in a corporate environment. I feel like the approach views threats only as coming from the outside while different studies have already proven that inside threats are just as, if not more, impo...

[ more ]