Comments on: Whose Risk?

By: Interesting Bits - April 28th, 2008 « Infosec Ramblings

Interesting Bits - April 28th, 2008 « Infosec Ramblings — Mon, 28 Apr 2008 15:14:30 +0000

[...] Whose Risk? [...]

By: Mike Murray

Mike Murray — Thu, 24 Apr 2008 23:14:01 +0000

Of COURSE I’m not… you actually called out the distinct audiences for each part of the debate, which is why your post inspired this rant on my part.

By: Andy

Andy — Thu, 24 Apr 2008 22:38:11 +0000

Ok, but just for my own feelings you’re not saying I’m ignoring the distinction right?

By: amritw

amritw — Thu, 24 Apr 2008 18:16:54 +0000

Good point – unfortunately this is part of the reason that valid concerns about risk and useful metrics that can be used to measure effectiveness and efficiency of an organizations IT security program quickly become an exercise is futility. Too often they are then sprinkled with a generous serving of FUD to overcome the bad taste