A Broader Context for Information Security
Topics: Risk Management
M. Eric Johnson
Financial Times
This article looks at the goal of effective risk management for information technology, which is not the elimination of security failures, but rather reducing their cost while empowering the business to take appropriate risks.
