IT Security: Evolving to a Risk-Based Approach

The premise of this article is sound.  Business and industry need to move beyond reacting to fear and toward managing risk.  Compliance efforts are far from enough and do not measure risk outside of the defined silo of the associated regulation.

http://www.tripwire.com/state-of-security/security-data-protection/it-security-evolving-to-a-risk-based-approach/

#compliance #fear #risk