http://www.bloginfosec.com/2008/03/11/the-core-truth-of-risk/ An Information Security Magazine in a Blog Format Wed, 27 Jan 2010 17:22:06 -0500 http://wordpress.org/?v=2.9.2 hourly 1 http://www.bloginfosec.com/2008/03/11/the-core-truth-of-risk/comment-page-1/#comment-459 Robert Mon, 17 Mar 2008 15:19:30 +0000 http://www.bloginfosec.com/2008/03/11/the-core-truth-of-risk/#comment-459 I think you should modify your statement from MANAGE risk not eliminate it...to MANAGE risk within the proper context of your company not eliminate it. Too many IT Risk people get caught up in this is what we did at my last company or this is what the Jones' do without remembering that what a company that produces electronics for USAF fighter and a company that makes grass seed are completely different in context of what is a risk. I think you should modify your statement from MANAGE risk not eliminate it…to MANAGE risk within the proper context of your company not eliminate it. Too many IT Risk people get caught up in this is what we did at my last company or this is what the Jones’ do without remembering that what a company that produces electronics for USAF fighter and a company that makes grass seed are completely different in context of what is a risk.

]]>