Top IT Security Bloggers

Injecting Relevance: Getting Use Out of a Useful Risk Assessment

  • Isaca
  • — 12 Oct 2016, 2:16 p.m.

A show of hands:  how many of you reading this have done a risk assessment, but felt that after it was completed it was never going to be used for much? I have done many and the results often fall on deaf ears. I have tried a variety of methods, used various tools, and done pretty much everything but stand on my head to get the results noticed. Then I realized what was missing:  relevance.I figured this out when I took a class on Operational Risk (see the excellent book written by Tony Blunde...

Read the full article