This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. > Find out more here

 

Risk Based Security Management – Corporate reality or wishful thinking?

By Claire Enefer

02 Nov 2012

View Comments
malware virus security threat

Live webseminar- 7th November at 3pm

Register here

Effective IT security is much more about proper management than it is about shiny new technologies.

Risk Based Security Management (RBSM) can be defined as the cost of mitigating risks to an asset relative to the value of that asset to a business.

It is a simple enough concept, requiring an organisation to establish the value of an asset, the likelihood that a threat will compromise that asset, and the impact or cost to the business of any compromise. Once this has been done an appropriate means by which that asset can be protected can be chosen.

Simple as it may be, the concept is not always properly applied.

During this web seminar we will be looking at what RBSM is and why risks are frequently under- or overestimated to the detriment of the organisation as a whole.

Speakers include:

Michael Aminzade - CISO EMEA, VeriFone

Gavin Millard - EMEA Technical Director, Tripwire

Stuart Sumner - Editor, Computing

John Leonard - Research Editor, Computing

Register here

Reader comments

blog comments powered by Disqus

Newsletters

Does Google know too much about you?

Google's linked data policy, which came into effect on March 1, allows the company to collect information about its users across all its products, services and websites and store it in one place. This has been criticised by organisations ranging from CNIL to Microsoft, all of whom have expressed concerns that it's difficult to tell which data Google collects and how it's used. Now the Information Commissioner's Office is investigating whether Google's privacy policy is compliant with UK law. Are you worried that Google knows too much about you?

41 %

5 %

15 %

39 %